[tor-bugs] #12766 [meek]: Disable TLSv1.1 and TLSv1.2 in the Firefox helper

["Tor Bug Tracker & Wiki" <blackhole@xxxxxxxxxxxxxx>]

#12766: Disable TLSv1.1 and TLSv1.2 in the Firefox helper
--------------------+---------------------
 Reporter:  dcf     |          Owner:  dcf
     Type:  defect  |         Status:  new
 Priority:  normal  |      Milestone:
Component:  meek    |        Version:
 Keywords:          |  Actual Points:
Parent ID:          |         Points:
--------------------+---------------------
 With #11253, Tor Browser's Firefox config has TLSv1.1 and TLSv1.2 turned
 on. If meek-http-helper (browser TLS camouflage) sends Firefox 24
 ciphersuites but uses TLSv1.1 or TLSv1.2, then it will look weird, because
 as I understand it, mainline Firefox 24 has TLSv1.1 and TLSv1.2 disabled.
 ([[doc/meek#Sampleclienthellos]] corroborates that ordinary Firefox 24
 uses TLSv1.0 when connecting to Google.)

 We also need to remember to turn TLSv1.1 and TLSv1.2 back on when they get
 enabled in the next ESR...

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/12766>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs