[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #29634 [Applications/Tor Browser]: Riot.im local storage lost when closing tab

#29634: Riot.im local storage lost when closing tab
-----------------------------------------+---------------------------------
 Reporter:  0tzVNmkQxgql                 |          Owner:  tbb-team
     Type:  defect                       |         Status:
                                         |  needs_information
 Priority:  Medium                       |      Milestone:
Component:  Applications/Tor Browser     |        Version:
 Severity:  Normal                       |     Resolution:
 Keywords:  riot, matrix, local storage  |  Actual Points:
Parent ID:                               |         Points:
 Reviewer:                               |        Sponsor:
-----------------------------------------+---------------------------------

Comment (by 0tzVNmkQxgql):

 I did some more testing. The culprit is this: Options -> Cookies and Site
 Data: Check "Keep until I close Tor Browser" (on all versions, included
 the latest).
 If I set this instead of "Keep until they expire", even opening
 riot.im/app in another tab while leaving the existing one open does not
 retain the session. At the same time, this setting does not actually
 delete any cookies when the browser closes either.
 IMO, correct behaviour would be session persistence while the browser is
 open and removal of all site data when it is closed. This is the
 (perceived) behaviour with vanilla settings, in private browsing mode.

 Also, adding riot.im as an "Allow" exception is of course superfluous, if
 cookies are accepted in general.

 I misinterpreted the settings; my goal was that Tor Browser cleans up all
 history, except for riot.im data, but I don't think that's possible right
 now. Optimally, Tor Browser should run in private browsing mode with
 vanilla settings, but allow whitelisting of sites to keep data across
 browser restarts, but that would be its own feature request.

 So in summary:
 - "Keep until I close Tor Browser" has some bugs
 - the only way to use Riot with TB is to disable private browsing mode,
 which is not ideal due to tracking cookies being retained (or if employing
 a whitelisting approach, enabling fingerprinting by having cookies blocked
 on all but a few sites).

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/29634#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs