Opened 11 months ago

Last modified 11 months ago

#28315 new defect

"New Identity for this Site"

Reported by: arthuredelstein Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords:
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description (last modified by arthuredelstein)

We have "New Circuit for this Site", but the cache and other supercookies for that first party are not wiped. Only the stream is changed.

It should be possible to implement "New Identity for this Site", for example by incrementing the container ID. (Note however that containers are not as strict as first-party isolation, so it might be better to introduce a new counting mechanism into origin attributes that shares the same strict policy as FPI.) In that case, all supercookies would be wiped and a fresh circuit used.

See also #28316.

Child Tickets

Change History (4)

comment:1 Changed 11 months ago by arthuredelstein

Description: modified (diff)

comment:2 Changed 11 months ago by arthuredelstein

Description: modified (diff)

comment:3 Changed 11 months ago by arma

If it's possible to build this, I think we should consider (from a ux perspective) getting rid of the 'new circuit for this site' option and just offering the 'new identity for this site' option. But there sure is a lot of per-site state to discard -- but being able to isolate it enough that we can discard it per-site would be awesome!

comment:4 Changed 11 months ago by arthuredelstein

Description: modified (diff)
Note: See TracTickets for help on using tickets.