ma1 pushed to branch tor-browser-128.3.0esr-14.0-1 at The Tor Project /
Applications / Tor Browser
Commits:
bbf13ec2 by hackademix at 2024-10-07T12:54:36+02:00
fixup! Firefox preference overrides.
MB361: Disable only cyphersuites using SH1 for signing (ECDSA).
- - - - -
1 changed file:
- browser/app/profile/001-base-profile.js
Changes:
=====================================
browser/app/profile/001-base-profile.js
=====================================
@@ -139,16 +139,13 @@ pref("network.http.referer.hideOnionSource", true);
// [4] https://www.ssllabs.com/ssl-pulse/
pref("security.ssl.require_safe_negotiation", true);
-// Bug 40183: Disable TLS ciphersuites using SHA-1
-// https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40183
+// mullvad-browser#361: Disable TLS cyphersuites using SHA1 for signing (ECDSA)
+// see https://bugzilla.mozilla.org/show_bug.cgi?id=1600437
+pref("security.ssl3.ecdhe_ecdsa_aes_256_sha", false);
+pref("security.ssl3.ecdhe_ecdsa_aes_128_sha", false);
+// lock those disabled by https://bugzilla.mozilla.org/show_bug.cgi?id=1036765
pref("security.ssl3.dhe_rsa_aes_128_sha", false, locked);
pref("security.ssl3.dhe_rsa_aes_256_sha", false, locked);
-pref("security.ssl3.ecdhe_ecdsa_aes_256_sha", false, locked);
-pref("security.ssl3.ecdhe_ecdsa_aes_128_sha", false, locked);
-pref("security.ssl3.ecdhe_rsa_aes_128_sha", false, locked);
-pref("security.ssl3.ecdhe_rsa_aes_256_sha", false, locked);
-pref("security.ssl3.rsa_aes_128_sha", false, locked);
-pref("security.ssl3.rsa_aes_256_sha", false, locked);
// Wrapping a static pref to lock it and prevent changing.
// See tor-browser#40565.
View it on GitLab:
https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/bbf13ec29e5de6baf5b132d4f25058ed86cd9e57
--
View it on GitLab:
https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/bbf13ec29e5de6baf5b132d4f25058ed86cd9e57
You're receiving this email because of your account on gitlab.torproject.org.
_______________________________________________
tbb-commits mailing list
[email protected]
https://lists.torproject.org/cgi-bin/mailman/listinfo/tbb-commits
