[tor-bugs] #28800 [Applications/Tor Browser]: Implement New Identity functionality for Tor Browser on Android

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed Nov 20 20:00:30 UTC 2019


#28800: Implement New Identity functionality for Tor Browser on Android
-------------------------------------------------+-------------------------
 Reporter:  gk                                   |          Owner:  tbb-
                                                 |  team
     Type:  task                                 |         Status:
                                                 |  needs_information
 Priority:  High                                 |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  tbb-mobile, tbb-newnym, ux-team,     |  Actual Points:
  TBA-a3, tbb-8.5, tbb-parity,                   |
  TorBrowserTeam201911                           |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
                                                 |  Sponsor9
-------------------------------------------------+-------------------------

Comment (by sisbell):

 Looking at tor button code, we have the following comment

  The "New Identity" implementation does the following:
  *   1. Disables Javascript and plugins on all tabs
  *   2. Clears state:
  *      a. OCSP
  *      b. Cache + image cache
  *      c. Site-specific zoom
  *      d. Cookies+DOM Storage+safe browsing key
  *      e. google wifi geolocation token
  *      f. http auth
  *      g. SSL Session IDs
  *      h. last open location url
  *      i. clear content prefs
  *      j. permissions
  *      k. site security settings (e.g. HSTS)
  *      l. IndexedDB and other DOM storage
  *      m. plugin data
  *      n. media devices
  *      o. predictor network data
  *   3. Sends tor the NEWNYM signal to get a new circuit
  *   4. Opens a new window with the default homepage
  *   5. Closes this window
  *
  * XXX: intermediate SSL certificates are not cleared.

 Is it just a matter off hooking up this functionality or is there
 something else involved here?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/28800#comment:14>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list