[tor-talk] Should DOM storage really be enabled by default in TorBrowser?

Aymeric Vitte vitteaymeric at gmail.com
Fri Jun 20 09:00:49 UTC 2014


Le 20/06/2014 10:15, Georg Koppen a écrit :
> Aymeric Vitte:
>> Le 19/06/2014 20:51, Georg Koppen a écrit :
>>> DOM Storage in Tor Browser does not save state to disc.
>> So it's there until you close your browser, that's far enough to track
>> you and expose you.
>>
>>>    And it is bound
>>> to the URL bar domain (see design document).
>> That's not specific to DOM storage, it just follows the same origin
>> policy like all W3C/WHATWG APIs
> That holds for the one in a vanilla Firefox, yes. But not for the one we
> ship. You should really read our design document and look at the commit
> in my other mail.
>

Could you please provide a direct link for both?


>
>

-- 
Peersm : http://www.peersm.com
node-Tor : https://www.github.com/Ayms/node-Tor
GitHub : https://www.github.com/Ayms



More information about the tor-talk mailing list