[tor-commits] [torbutton/master] Bug 4603: Lower keep-alive timeout to reduce linkability

[mikeperry at torproject.org]

commit 2d4e6e85f27b920acc0ca6f9b9f23aa836ae59d9
Author: Mike Perry <mikeperry-git at fscked.org>
Date:   Thu Dec 8 15:30:16 2011 -0800

    Bug 4603: Lower keep-alive timeout to reduce linkability
    
    20 seconds seems a decent compromise until we can properly isolate
    keep-alive connections..
---
 src/chrome/content/torbutton.js |    8 ++++++++
 1 files changed, 8 insertions(+), 0 deletions(-)

diff --git a/src/chrome/content/torbutton.js b/src/chrome/content/torbutton.js
index a641299..beb43ab 100644
--- a/src/chrome/content/torbutton.js
+++ b/src/chrome/content/torbutton.js
@@ -1966,6 +1966,14 @@ function torbutton_update_status(mode, force_update) {
           !m_tb_prefs.getBoolPref("security.enable_ssl2"));
     }
 
+    // Lower keep-alive timeout to reduce cross-domain linkability
+    // https://trac.torproject.org/projects/tor/ticket/4603
+    if (mode) {
+      m_tb_prefs.setIntPref("network.http.keep-alive.timeout", 20);
+    } else {
+      m_tb_prefs.clearUserPref("network.http.keep-alive.timeout");
+    }
+
     // This clears the OCSP cache.
     //
     // nsNSSComponent::Observe() watches security.OCSP.enabled, which calls