Re: [tor-talk] Should DOM storage really be enabled by default in TorBrowser?

2014-06-20 Thread Georg Koppen
Aymeric Vitte: Le 19/06/2014 20:51, Georg Koppen a écrit : DOM Storage in Tor Browser does not save state to disc. So it's there until you close your browser, that's far enough to track you and expose you. And it is bound to the URL bar domain (see design document). That's not

Re: [tor-talk] Should DOM storage really be enabled by default in TorBrowser?

2014-06-20 Thread Georg Koppen
Aymeric Vitte: That's really strange, why don't you just disable it like cookies, indexedDB, etc? Cookies are not disabled in Tor Browser (only third party cookies). And, oh, there is this fun bug in Firefox: https://bugzilla.mozilla.org/show_bug.cgi?id=536509

Re: [tor-talk] Should DOM storage really be enabled by default in TorBrowser?

2014-06-20 Thread Aymeric Vitte
Le 20/06/2014 10:15, Georg Koppen a écrit : Aymeric Vitte: Le 19/06/2014 20:51, Georg Koppen a écrit : DOM Storage in Tor Browser does not save state to disc. So it's there until you close your browser, that's far enough to track you and expose you. And it is bound to the URL bar domain

Re: [tor-talk] Should DOM storage really be enabled by default in TorBrowser?

2014-06-20 Thread Aymeric Vitte
Le 20/06/2014 10:44, Georg Koppen a écrit : Aymeric Vitte: That's really strange, why don't you just disable it like cookies, indexedDB, etc? Cookies are not disabled in Tor Browser (only third party cookies). And, oh, there is this fun bug in Firefox:

Re: [tor-talk] On recent and upcoming developments in the PT universe

2014-06-20 Thread Erik de Castro Lopo
George Kadianakis wrote: Hello friends, this is a brief post on recent and upcoming developments in the PT universe. Err, sorry, what is PT? Erik -- -- Erik de Castro Lopo http://www.mega-nerd.com/ -- tor-talk mailing

Re: [tor-talk] On recent and upcoming developments in the PT universe

2014-06-20 Thread krishna e bera
On 14-06-20 06:30 AM, Erik de Castro Lopo wrote: George Kadianakis wrote: Hello friends, this is a brief post on recent and upcoming developments in the PT universe. Err, sorry, what is PT? pluggable transport -- tor-talk mailing list - tor-talk@lists.torproject.org To unsubscribe or

Re: [tor-talk] Should DOM storage really be enabled by default in TorBrowser?

2014-06-20 Thread Joe Btfsplk
On 6/19/2014 1:51 PM, Georg Koppen wrote: Joe Btfsplk: Curious: Should DOM storage really be enabled by default in Tor Browser 3.6.x, when other forms of disk storage are disabled? DOM Storage in Tor Browser does not save state to disc. And it is bound to the URL bar domain (see design

[tor-talk] Reminder: Tor 0.2.2 and earlier are deprecated and will eventually stop working

2014-06-20 Thread Nick Mathewson
Hi, all! This is a reminder that Tor 0.2.2 has been deprecated for quite a while now: Tor 0.2.2.x servers are no longer listed on the Tor network, and haven't been for a while. With the upcoming 0.2.6.x series, we will begin dropping support for some of the older protocol features that 0.2.2.x

Re: [tor-talk] Should DOM storage really be enabled by default in TorBrowser?

2014-06-20 Thread Georg Koppen
Aymeric Vitte: So the logic is: we accept non third party cookies, therefore we accept localStorage and we suppose localStorage is disabled for third parties. [snip] And what's the point of allowing localStorage if you allow non third party cookies? That is covered in

Re: [tor-talk] Should DOM storage really be enabled by default in TorBrowser?

2014-06-20 Thread Joe Btfsplk
On 6/20/2014 9:04 AM, Joe Btfsplk wrote: On 6/19/2014 1:51 PM, Georg Koppen wrote: Joe Btfsplk: Curious: Should DOM storage really be enabled by default in Tor Browser 3.6.x, when other forms of disk storage are disabled? DOM Storage in Tor Browser does not save state to disc. And it is

Re: [tor-talk] Should DOM storage really be enabled by default in TorBrowser?

2014-06-20 Thread Aymeric Vitte
So to summarize, localStorage is following strictly the cookie policy, the Tor Browser does not save it to the disk and has implemented a patch for this and to fix the FF bug for third party localStorage. But localStorage is not only about cookie-like uses. I understand that the philosophy