[tor-dev] handling TLS Session Ticket/Identifier for Android

Tom Ritter tom at ritter.vg
Mon Oct 24 16:44:25 UTC 2016


The info I gave you was for Tor Browser, the the latter (about session
ID) is actually wrong. TBB disables both.

https://trac.torproject.org/projects/tor/ticket/20447#ticket
https://gitweb.torproject.org/tor-browser.git/tree/security/manager/ssl/nsNSSComponent.cpp?h=tor-browser-45.4.0esr-6.5-1#n724

Also: https://trac.torproject.org/projects/tor/ticket/4099

Core Tor also disables both also AFAICT:
https://gitweb.torproject.org/tor.git/commit/?id=8743080a289a20bfaf0a67d6382ba0c2a6d6534d
https://gitweb.torproject.org/tor.git/tree/src/common/tortls.c#n1164

-tom


More information about the tor-dev mailing list