[tor-bugs] #12766 [meek]: Disable TLSv1.1 and TLSv1.2 in the Firefox helper

Tor Bug Tracker & Wiki blackhole at torproject.org
Fri Aug 1 23:58:26 UTC 2014


#12766: Disable TLSv1.1 and TLSv1.2 in the Firefox helper
--------------------+---------------------
 Reporter:  dcf     |          Owner:  dcf
     Type:  defect  |         Status:  new
 Priority:  normal  |      Milestone:
Component:  meek    |        Version:
 Keywords:          |  Actual Points:
Parent ID:          |         Points:
--------------------+---------------------
 With #11253, Tor Browser's Firefox config has TLSv1.1 and TLSv1.2 turned
 on. If meek-http-helper (browser TLS camouflage) sends Firefox 24
 ciphersuites but uses TLSv1.1 or TLSv1.2, then it will look weird, because
 as I understand it, mainline Firefox 24 has TLSv1.1 and TLSv1.2 disabled.
 ([[doc/meek#Sampleclienthellos]] corroborates that ordinary Firefox 24
 uses TLSv1.0 when connecting to Google.)

 We also need to remember to turn TLSv1.1 and TLSv1.2 back on when they get
 enabled in the next ESR...

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/12766>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list