Commit a2a3ee11 authored by Mike Perry's avatar Mike Perry
Browse files

Disable SSL Session ID tracking. 

We can't easily bind SSL Session ID tracking to url bar domain,
so we have to disable them to satisfy
https://www.torproject.org/projects/torbrowser/design/#identifier-linkability.
parent c4fdf712

security/nss/lib/ssl/sslsock.c

+1 −1
Original line number Diff line number Diff line
@@ -65,7 +65,7 @@ static sslOptions ssl_defaults = { 
    PR_FALSE,   /* enableSSL2         */ /* now defaults to off in NSS 3.13 */

    PR_FALSE,   /* unusedBit9         */

    PR_FALSE,   /* unusedBit10        */

    PR_FALSE,   /* noCache            */

    PR_TRUE,    /* noCache            */

    PR_FALSE,   /* fdx                */

    PR_FALSE,   /* v2CompatibleHello  */ /* now defaults to off in NSS 3.13 */

    PR_TRUE,    /* detectRollBack     */