Provide a proper fix for POODLE
We put the hotfix defense against POODLE in the bundle descriptor to avoid compiling Firefox again. We should revert that and set the pref in 000-tor-browser.js where all the other custom prefs are set.
We put the hotfix defense against POODLE in the bundle descriptor to avoid compiling Firefox again. We should revert that and set the pref in 000-tor-browser.js where all the other custom prefs are set.
See bug_13435 in my tor-browser repo. I'll revert the things in the tor-browser-bundle repo after this fix has landed.
Trac:
Keywords: N/A deleted, MikePerry201410R added
Status: new to needs_review
No need to review the patch anymore. In the next ESR 31 SSLv3 will be disabled by default, too: https://bugzilla.mozilla.org/show_bug.cgi?id=1076983#c73. Once we switched to it I'll revert the commit in the tor-browser-bundle repo.
Trac:
Status: needs_review to assigned
Keywords: MikePerry201410R deleted, N/A added
77e6fb571a69e4b146909dfda8f7552b34ab34d8 reverts the hotfix. Thus, this ticket is for reverting the fix in our tor-browser repo then as soon as the next ESR 31 lands and we rebase.
Seems this got fixed by commit 91ef6ad6972aac82b7ce539664a27fd471251733.
Trac:
Resolution: N/A to fixed
Status: assigned to closed
closed