[tor-commits] [tor-browser/tor-browser-31.2.0esr-4.x-1] fixup! TB4: Tor Browser's Firefox preference overrides.

[mikeperry@xxxxxxxxxxxxxx]

commit 187dd1ff67068abde5d36f61aca1305c76daded8
Author: Mike Perry <mikeperry-git@xxxxxxxxxxxxxx>
Date:   Fri Oct 24 16:18:40 2014 -0700

    fixup! TB4: Tor Browser's Firefox preference overrides.
    
    Bug 13416: Defend against new SSLv3 attack (poodle).
---
 browser/app/profile/000-tor-browser.js |    2 ++
 1 file changed, 2 insertions(+)

diff --git a/browser/app/profile/000-tor-browser.js b/browser/app/profile/000-tor-browser.js
index e0eb834..83b79b2 100644
--- a/browser/app/profile/000-tor-browser.js
+++ b/browser/app/profile/000-tor-browser.js
@@ -169,6 +169,8 @@ pref("media.audio_data.enabled", false);
 // Enable TLS 1.1 and 1.2:
 // https://trac.torproject.org/projects/tor/ticket/11253
 pref("security.tls.version.max", 3);
+// POODLE hotfix: Disable SSLv3
+pref("security.tls.version.min", 1);
 
 #ifdef TOR_BROWSER_VERSION
 #expand pref("torbrowser.version", __TOR_BROWSER_VERSION__);



_______________________________________________
tor-commits mailing list
tor-commits@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-commits