[tor-bugs] #18885 [Applications/Tor Browser]: Disable logging of TLS/SSL key material by default in Tor Browser

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed May 18 21:13:49 UTC 2016


#18885: Disable logging of TLS/SSL key material by default in Tor Browser
-------------------------------------------------+-------------------------
 Reporter:  gk                                   |          Owner:  gk
     Type:  enhancement                          |         Status:  closed
 Priority:  Medium                               |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:  fixed
 Keywords:  ff45-esr, TorBrowserTeam201605R,     |  Actual Points:
  GeorgKoppen201605, tbb-6.0-must                |         Points:
Parent ID:                                       |        Sponsor:
 Reviewer:                                       |
-------------------------------------------------+-------------------------

Comment (by mcs):

 Replying to [comment:6 gk]:
 > Fixed in commit f5c58c88029648b608d75cdb06d82b06f0d30953. I actually
 doubt Mozilla is tweaking the patch more. In fact, curiously, Firefox is
 not even using it as the necko people and others got their pitchforks out
 and argued they needed that feature for debugging purposes even in
 optimized, non-debug builds. But in NSS it is still there.

 Interesting. I guess I did not read the Bugzilla bug carefully and thought
 the fix was still pending on the NSS side (I think I saw
 https://bugzilla.mozilla.org/show_bug.cgi?id=1183318#c35 while reading in
 newest-to-oldest comment order and missed the fact that the status is
 RESOLVED FIXED). So never mind.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18885#comment:7>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list