[tor-bugs] #11154 [Applications/Tor Browser]: Disable TLS 1.0 (and 1.1) by default (was: Tor TLS and Security Cipher)

[Tor Bug Tracker & Wiki]

#11154: Disable TLS 1.0 (and 1.1) by default
--------------------------------------+--------------------------
 Reporter:  ZeroCool                  |          Owner:  tbb-team
     Type:  defect                    |         Status:  new
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:  ff78-esr-will-have        |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+--------------------------
Changes (by gk):

 * keywords:  needs-triage => ff78-esr-will-have


Comment:

 We have everything this bug complains about apart from the tls min
 version. However, a fix for that landed recently: https://hg.mozilla.org
 /mozilla-central/rev/1d07ac23cc5a, so it seems Mozilla is confident this
 sticks and is not impacting usability too much. We could probably think
 about backporting that fix into our alpha series. Dunno what the real
 browser devs think about that, though. :)

 Either way, this will be fixed in esr78.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/11154#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online