[tor-bugs] #4099 [Tor Browser]: Disable TLS session resumption and HTTP keep-alive

Tor Bug Tracker & Wiki torproject-admin at torproject.org
Tue Nov 22 16:34:22 UTC 2011


#4099: Disable TLS session resumption and HTTP keep-alive
----------------------------------------+-----------------------------------
 Reporter:  mikeperry                   |          Owner:  mikeperry                    
     Type:  defect                      |         Status:  new                          
 Priority:  major                       |      Milestone:  TorBrowserBundle 2.2.x-stable
Component:  Tor Browser                 |        Version:                               
 Keywords:  MikePerryIteration20111120  |         Parent:                               
   Points:  1                           |   Actualpoints:                               
----------------------------------------+-----------------------------------

Comment(by gk):

 And I can confirm that the pref is oding what it should:
 With Session Resumption enabled I get (in the ClientHello):
 {{{
 extension type server_name, length [14] = {...}
 extension type elliptic_curves, length [8] = {...}
 extension type ec_point_formats, length [2] = {...}
 extension type session_ticket, length [0]
 }}}
 Without I get (again in the ClientHello):
 {{{
 extension type elliptic_curves, length [8] = {...}
 extension type ec_point_formats, length [2] = {...}
 }}}
 Not sure why the server_name extension is missing in the latter case,
 though. I connected to the same server.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/4099#comment:13>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list