[tor-bugs] #4099 [Tor Browser]: Disable TLS session resumption and HTTP keep-alive

[Tor Bug Tracker & Wiki]

#4099: Disable TLS session resumption and HTTP keep-alive
-------------------------+--------------------------------------------------
 Reporter:  mikeperry    |          Owner:  mikeperry                    
     Type:  defect       |         Status:  new                          
 Priority:  major        |      Milestone:  TorBrowserBundle 2.2.x-stable
Component:  Tor Browser  |        Version:                               
 Keywords:               |         Parent:                               
   Points:               |   Actualpoints:                               
-------------------------+--------------------------------------------------

Comment(by gk):

 Replying to [comment:1 mikeperry]:
 > gk - You guys disable HTTP Keep-alive to prevent 3rd party correlation,
 right?
 Yes (proxy keep-alive), that is vital to JonDonym and its static mix
 cascades currently.
 > Do you do anything about TLS Session IDs across different tabs/domains?
 I am working on it at the moment although I fear binding it to the tab
 could be really tricky. To take the domain is probably easier here.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/4099#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online