[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
[tor-commits] [tor-browser-spec/master] More comments from Georg.
commit 2d1c3e4e56a4dbe7bbd63690b7685fdb3364abd7
Author: Mike Perry <mikeperry-git@xxxxxxxxxx>
Date: Tue Oct 11 15:19:16 2011 -0700
More comments from Georg.
---
docs/design/design.xml | 12 ++++++++----
1 file changed, 8 insertions(+), 4 deletions(-)
diff --git a/docs/design/design.xml b/docs/design/design.xml
index 414241c..6782dc9 100644
--- a/docs/design/design.xml
+++ b/docs/design/design.xml
@@ -959,10 +959,14 @@ not be reused for that same third party in another url bar origin.
</para>
<para><command>Implementation Status:</command>
-We <ulink url="https://trac.torproject.org/projects/tor/ticket/4099">plan to
-disable</ulink> TLS session resumption, and limit HTTP Keep-alive duration. We
-currently clear TLS Session IDs upon <link linkend="new-identity">New
-Identity</link>.
+We currently clear TLS Session IDs upon <link linkend="new-identity">New
+Identity</link>, but we have no origin restriction implementation as of yet.
+We plan to <ulink
+url="https://trac.torproject.org/projects/tor/ticket/4099">disable TLS session
+resumption</ulink>, and limit HTTP Keep-alive duration as stopgaps to limit
+linkability until we can implement <ulink
+url="https://trac.torproject.org/projects/tor/ticket/4100">true origin
+isolation</ulink> (the latter we feel will be fairly tricky).
</para>
</listitem>
_______________________________________________
tor-commits mailing list
tor-commits@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-commits