Opened 14 months ago

Last modified 10 months ago

#27123 new defect

Investigate PING/SETTINGS-related timing side-channels

Reported by: arthuredelstein Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: tbb-security
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

We are auditing HTTP/2 for tracking vectors in #14592. But a more difficult question for HTTP/2 (and potentially HTTP 1.x) are timing side channels.

Child Tickets

Change History (1)

comment:1 Changed 10 months ago by omg

Keywords: tbb-security added

timing side channels

Note: See TracTickets for help on using tickets.