Opened 7 years ago

Closed 7 years ago

#6204 closed defect (fixed)

Disable navigation timing

Reported by: gk Owned by: mikeperry
Priority: High Milestone: TorBrowserBundle 2.3.x-stable
Component: TorBrowserButton Version:
Severity: Keywords: MikePerry201302 tbb-fingerprinting tbb-pref
Cc: Actual Points: 0.5
Parent ID: #3059 Points:
Reviewer: Sponsor:

Description

dom.enable_performance should be set to false to avoid risks associated with navigation timing (http://www.w3.org/TR/2011/CR-navigation-timing-20110315/).

Child Tickets

Change History (3)

comment:1 Changed 7 years ago by mikeperry

Keywords: tbb-fingerprinting added
Parent ID: #3059

To be clear, for us the fingerprinting risks are in the DOM rendering timers more so than the network stuff. However, I also don't see a lot of use for this info during a specific page load. It seems more like the type of stuff that will be useful in aggregate and/or during development than for tweaking behavior to timing conditions on the fly. I am fine simply fully switching it off and leaving it off for these reasons.

comment:2 Changed 7 years ago by mikeperry

Keywords: tbb-pref added

comment:3 Changed 7 years ago by mikeperry

Actual Points: 0.5
Keywords: MikePerry201302 added
Resolution: fixed
Status: newclosed

This pref is set in TBB-2.3.25-4.

Note: See TracTickets for help on using tickets.