Firefox sends your uptime

Gregory Maxwell gmaxwell at
Sat Apr 5 21:11:38 UTC 2008

On Sat, Apr 5, 2008 at 6:01 AM, .FUF <fuf at> wrote:
> Mozilla Firefox sends your computer's uptime while establishing TLS
>  (SSL) connection. This could be used to correlate anonymous traffic with
>  non-anonymous (e.g. LAN traffic) by correlating intercepted uptime
>  values (or to search the originator of anonymous traffic by correlating
>  uptime values from TCP timestamps in GNU/Linux and some other operating
>  systems)

Why does TLS include this?  Is it used for some kind of replay prevention?

More information about the tor-talk mailing list