[tor-bugs] #4744 [Tor Bridge]: GFW probes based on Tor's SSL cipher list (?)

[Tor Bug Tracker & Wiki]

#4744: GFW probes based on Tor's SSL cipher list (?)
------------------------+---------------------------------------------------
 Reporter:  asn         |          Owner:  nickm             
     Type:  defect      |         Status:  accepted          
 Priority:  major       |      Milestone:  Tor: 0.2.3.x-final
Component:  Tor Bridge  |        Version:                    
 Keywords:              |         Parent:  #4185             
   Points:              |   Actualpoints:                    
------------------------+---------------------------------------------------
Changes (by nickm):

  * owner:  => nickm
  * priority:  blocker => major
  * status:  new => accepted
  * milestone:  => Tor: 0.2.3.x-final


Comment:

 I think that editing ciphers.inc to match this might be sensible.

 Some questions:

   - How did you you make this list?
   - What exactly is your environment here? Does the same thing happen with
 the latest mainstream firefox?  How about Chrome?
   - Does openssl send the TLS_EMPTY_RENEGOTIATION_INFO_SCSV value? I worry
 adding it on our own could lead to trouble and incompatibility.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/4744#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online