[tor-bugs] #11154 [Applications/Tor Browser]: Disable TLS 1.0 (and 1.1) by default (was: Tor TLS and Security Cipher)

Tor Bug Tracker & Wiki blackhole at torproject.org
Fri Jan 17 09:00:21 UTC 2020

#11154: Disable TLS 1.0 (and 1.1) by default
 Reporter:  ZeroCool                  |          Owner:  tbb-team
     Type:  defect                    |         Status:  new
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:  ff78-esr-will-have        |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
Changes (by gk):

 * keywords:  needs-triage => ff78-esr-will-have


 We have everything this bug complains about apart from the tls min
 version. However, a fix for that landed recently: https://hg.mozilla.org
 /mozilla-central/rev/1d07ac23cc5a, so it seems Mozilla is confident this
 sticks and is not impacting usability too much. We could probably think
 about backporting that fix into our alpha series. Dunno what the real
 browser devs think about that, though. :)

 Either way, this will be fixed in esr78.

Ticket URL: <https://trac.torproject.org/projects/tor/ticket/11154#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

More information about the tor-bugs mailing list