[tor-bugs] #4099 [Tor Browser]: Disable TLS session resumption and HTTP keep-alive

Tor Bug Tracker & Wiki torproject-admin at torproject.org
Tue Sep 27 00:01:01 UTC 2011


#4099: Disable TLS session resumption and HTTP keep-alive
-------------------------+--------------------------------------------------
 Reporter:  mikeperry    |          Owner:  mikeperry                    
     Type:  defect       |         Status:  new                          
 Priority:  major        |      Milestone:  TorBrowserBundle 2.2.x-stable
Component:  Tor Browser  |        Version:                               
 Keywords:               |         Parent:                               
   Points:               |   Actualpoints:                               
-------------------------+--------------------------------------------------
Changes (by mikeperry):

 * cc: gk (added)


Comment:

 gk - You guys disable HTTP Keep-alive to prevent 3rd party correlation,
 right? Do you do anything about TLS Session IDs across different
 tabs/domains?

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/4099#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list