Tor Browser issueshttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues2021-03-08T17:48:09Zhttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40328Tor Browser doesn't run on recent arch: Missing server TLS certificates2021-03-08T17:48:09ZJim NewsomeTor Browser doesn't run on recent arch: Missing server TLS certificatesWe've had two reports of users on 10.0.10 on Linux not being able to establish a secure connection to any web site. The url shows https, but "insecure". Clicking through, it looks as if there's no server certificate at all.
One user rep...We've had two reports of users on 10.0.10 on Linux not being able to establish a secure connection to any web site. The url shows https, but "insecure". Clicking through, it looks as if there's no server certificate at all.
One user reported that switching to the alpha version of TBB resolved the issue. ~~The second user reported that it didn't.~~
The second user verified that the browser does correctly report *invalid* certificates, using badssl.com.
The second user was able to fix it with a clean profile. (Update: a clean profile *on alpha*. Still broken on 10.0.10)
![-Hqs](/uploads/20c9440c995efd06e765c0c195b6cdec/-Hqs.png)
![-Hqz](/uploads/f5a88d5735f99a6fa8f5a921f638c9d6/-Hqz.png)
![-HNT](/uploads/0863d0230349bff897b2292c78e8fbd8/-HNT.png)
```
15:40 < rany> Hi, I'm having an issue right now with Tor Browser reporting all HTTPS
connections as insecure. This happened after the update to 10.0.10
15:43 < rany> screenshot: https://0x0.st/-HNT.png
16:47 < jnewsome> rany: what does it say if you click on the right-arrow next to
"connection not secure"?
16:50 < rany> https://0x0.st/-Hqs.png
16:53 < jnewsome> strange. someone reported a similar problem yesterday; I think they
ultimately worked around it by installing the alpha version of the tor
browser
16:53 < rany> and https://0x0.st/-Hqz.png
16:53 < rany> hmm, well it's not bothering too much but i wanted to check if its
intentional cuz i can't find anything in the change log
16:53 < jnewsome> thank you for the screenshots; I wasn't able to get detailed info from
the reporter yesterday
16:54 < rany> so not all TB users have this issue?
16:54 < jnewsome> nope; I'm on the same version and not experiencing that problem
16:55 < jnewsome> is this linux?
16:55 < rany> yes
16:55 < jnewsome> I would be careful about using the browser in this state; you might not
detect a man-in-the-middle attack
16:56 < rany> I'll try the alpha version of TB and check if that fixes it
16:56 < rany> yeah, good point
16:58 < rany> tor browser alpha doesn't fix it for me :/
16:59 < jnewsome> I wonder if this could be an actual attack. Could you try requesting a
few circuits and see if it works for any of them?
17:01 < rany> i've tried a ton of circuits and so far they all have the issue ... so
probably unlikely
17:01 < rany> also bad SSL certificates still get detected fine ... just tried from
badssl.com
17:02 < rany> so it seems like verification is working all right
...
17:25 < rany> though TB works fine with a clean profile
17:26 < rany> not sure why the update broke my old profile
...
17:36 < rany> nevermind, i just got the same issue even with a clean profile
17:36 < rany> /shrug
17:36 < rany> (but that's on stable TB )
```Tor Browser: 10.0https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40140YouTube videos stop working after TB 10 update2022-05-16T17:11:00ZGusYouTube videos stop working after TB 10 updateAfter the last release, Tor Browser 10.0, some users are reporting issues to watch YouTube videos:
### User 1
When I try to select and play a YouTube video, the following message shows up.
![youtube-1](/uploads/0592c7271a42634ad49e9ae...After the last release, Tor Browser 10.0, some users are reporting issues to watch YouTube videos:
### User 1
When I try to select and play a YouTube video, the following message shows up.
![youtube-1](/uploads/0592c7271a42634ad49e9ae199ee624d/youtube-1.jpeg)
As I'm concerned that by signing in, YouTube would start surveilling my web activities, I choose [NO THANKS] and turn off all of the cookie setting. Then, I always get the following error message, i.e., I can't play the video.
![youtube-2](/uploads/818840a853722f1fcb18a91e656d5db1/youtube-2.jpeg)
### User 2
With your new update, YouTube.com does not work. While the basic site works, the videos cannot load.
Tor with Brave continues to work with youtube but please fix this problem.Tor Browser: 10.0Georg KoppenGeorg Koppenhttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40139Update Onboarding icon for 10.02020-10-08T12:59:52ZMatthew FinkelUpdate Onboarding icon for 10.0The Onboarding onion icon should link to the tor browser 10.0 release notes.The Onboarding onion icon should link to the tor browser 10.0 release notes.Tor Browser: 10.0https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40392Rebase 10.5 patches on 88.0b42021-04-20T20:47:48ZMatthew FinkelRebase 10.5 patches on 88.0b454886642ddc5a50633fb49458cb6795b3fb654e954886642ddc5a50633fb49458cb6795b3fb654e9Tor Browser: 10.0https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40384Prepare switch to mozilla882021-06-07T15:06:22ZMatthew FinkelPrepare switch to mozilla88- [x] #40392 (Rebase tor-browser patches to 88.0b4)
- [x] tor-browser-build#40266 (Make the list of components updates for switch to mozilla88-based Fenix)
- [x] tor-browser-build#40259 (Update components for switch to mozilla88-based Fe...- [x] #40392 (Rebase tor-browser patches to 88.0b4)
- [x] tor-browser-build#40266 (Make the list of components updates for switch to mozilla88-based Fenix)
- [x] tor-browser-build#40259 (Update components for switch to mozilla88-based Fenix)
- [x] #40396 (Review developer notes for Firefox 88)
- [x] #40397 (Review GeckoView Changelog for gv88)
- [ ] #40398 (Review closed mozilla88 bug)
- [x] #40399 (Rebase 10.5 patches on 88.0)
- [x] android-components#40048 (Rebase android-components patches for Fenix 88 beta X builds)
- [x] android-components#40050 (Rebase android-components patches for Fenix 88)
- [ ] android-components#40049 (Review MozAC Changelog for Fenix88)
- [x] fenix#40154 (Rebase Fenix patches to Fenix 88 beta 4)
- [x] fenix#40157 (Rebase Fenix patches to Fenix 88.1.0)
- [x] tor-browser-spec#40017 (FF88 network audit)
- [ ] tor-browser-bundle-testsuite#40022 (Update tests when switching to Fenix 88)
- [x] fenix#40155 (Review changes for Fenix88)
- [ ] #40406Tor Browser: 10.0https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40383Disable dom.enable_event_timing2023-12-04T09:55:28ZMatthew FinkelDisable dom.enable_event_timingPrototype PerformanceEventTiming - https://bugzilla.mozilla.org/show_bug.cgi?id=1667836
- https://hg.mozilla.org/integration/autoland/rev/e86df3d99d16
- https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40364#note_27...Prototype PerformanceEventTiming - https://bugzilla.mozilla.org/show_bug.cgi?id=1667836
- https://hg.mozilla.org/integration/autoland/rev/e86df3d99d16
- https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40364#note_2729876
- Only true in Nightly
- Does not clamp measurementsTor Browser: 10.0https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40378Rebase 10.0 patches onto 78.9.0esr2021-03-20T15:02:41ZMatthew FinkelRebase 10.0 patches onto 78.9.0esr4735a3924735a392Tor Browser: 10.0https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40373Rebase tor-browser patches to 87.0b92021-03-23T21:15:12ZMatthew FinkelRebase tor-browser patches to 87.0b9Tor Browser: 10.0https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40365Rebase 10.5 patches on 87.02021-04-05T21:54:24ZMatthew FinkelRebase 10.5 patches on 87.04068febfd76d9ec557591240d7496be42c27c17f4068febfd76d9ec557591240d7496be42c27c17fTor Browser: 10.0https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40364Review closed mozilla87 bug2021-03-22T17:39:23ZMatthew FinkelReview closed mozilla87 bugTor Browser: 10.0https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40363Review GeckoView Changelog for gv872021-03-22T17:42:42ZMatthew FinkelReview GeckoView Changelog for gv87Tor Browser: 10.0https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40362Review developer notes for Firefox 872021-03-15T14:38:17ZMatthew FinkelReview developer notes for Firefox 87Tor Browser: 10.0Georg KoppenGeorg Koppenhttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40361Rebase tor-browser patches to 87.0b42021-09-02T13:53:38ZMatthew FinkelRebase tor-browser patches to 87.0b4ff7603ae997e7ae3eab789c3187c9b2eb05732daff7603ae997e7ae3eab789c3187c9b2eb05732daTor Browser: 10.0https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40360Prepare switch to mozilla872021-06-07T15:05:17ZMatthew FinkelPrepare switch to mozilla87- [x] #40361 (Rebase tor-browser patches to 87.0b4)
- [x] tor-browser-build#40241 (Update components for switch to mozilla87-based Fenix)
- [x] #40362 (Review developer notes for Firefox 87)
- [x] #40363 (Review GeckoView Changelog for g...- [x] #40361 (Rebase tor-browser patches to 87.0b4)
- [x] tor-browser-build#40241 (Update components for switch to mozilla87-based Fenix)
- [x] #40362 (Review developer notes for Firefox 87)
- [x] #40363 (Review GeckoView Changelog for gv87)
- [x] #40364 (Review closed mozilla87 bug)
- [x] #40365 (Rebase 10.5 patches on 87.0)
- [x] android-components#40043 (Rebase android-components patches for Fenix 87 beta X builds)
- [x] android-components#40044 (Review MozAC Changelog for Fenix87)
- [x] fenix#40150 (Rebase Fenix patches to Fenix 87 beta 2)
- [x] tor-browser-spec#40016 (FF87 network audit)
- [ ] tor-browser-bundle-testsuite#40019 (Update tests when switching to Fenix 87)
- [x] fenix#40152 (Review changes for Fenix87)Tor Browser: 10.0https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40344Set privacy.window.name.update.enabled=false until we drop #166202021-02-17T23:59:53ZAlex CatarineuSet privacy.window.name.update.enabled=false until we drop #16620I think it's preferable to only have one implementation enabled at the same time.I think it's preferable to only have one implementation enabled at the same time.Tor Browser: 10.0https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40341Rebase 10.0 patches onto 78.8.0esr2021-02-17T18:22:35ZMatthew FinkelRebase 10.0 patches onto 78.8.0esrbace0d2a46cabd36f5bdc738c000f15ae4a4225cbace0d2a46cabd36f5bdc738c000f15ae4a4225cTor Browser: 10.0https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40332Cannot log in to certain sites2021-02-21T04:36:45Z281587887aCannot log in to certain sitesProtonMail (@ https://mail.protonmail.com/login or https://protonirockerxow.onion/) and Wordpress (@ https://wordpress.com/log-in?redirect_to=https%3A%2F%2Fwordpress.com%2F) login screens get stuck even when the Security Level is set to ...ProtonMail (@ https://mail.protonmail.com/login or https://protonirockerxow.onion/) and Wordpress (@ https://wordpress.com/log-in?redirect_to=https%3A%2F%2Fwordpress.com%2F) login screens get stuck even when the Security Level is set to Standart and NoScript is disabled.
Browser version: 10.0.10 (based on Mozilla Firefox 78.7.0esr) (64-bit)
Installed via https://archlinux.org/packages/community/any/torbrowser-launcher/Tor Browser: 10.0https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40329Localize Cryptocurrency Safety messages2021-05-03T14:02:15ZMatthew FinkelLocalize Cryptocurrency Safety messageshttps://gitlab.torproject.org/tpo/applications/tor-browser/-/merge_requests/116#note_2725468https://gitlab.torproject.org/tpo/applications/tor-browser/-/merge_requests/116#note_2725468Tor Browser: 10.0https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40326Prep 10.0.11 (Windows)2021-02-05T16:54:42ZMatthew FinkelPrep 10.0.11 (Windows)Tor Browser: 10.0https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40325Rebase 10.0 patches on 78.7.1esr2021-02-05T17:12:45ZMatthew FinkelRebase 10.0 patches on 78.7.1esrf9e12224fd4744d571cd527f96c93f9a5ce2c12bf9e12224fd4744d571cd527f96c93f9a5ce2c12bTor Browser: 10.0