{"action":"created","issue":{"url":"https://api.github.com/repos/ghacksuserjs/ghacks-user.js/issues/536","repository_url":"https://api.github.com/repos/ghacksuserjs/ghacks-user.js","labels_url":"https://api.github.com/repos/ghacksuserjs/ghacks-user.js/issues/536/labels{/name}","comments_url":"https://api.github.com/repos/ghacksuserjs/ghacks-user.js/issues/536/comments","events_url":"https://api.github.com/repos/ghacksuserjs/ghacks-user.js/issues/536/events","html_url":"https://github.com/ghacksuserjs/ghacks-user.js/issues/536","id":381261065,"node_id":"MDU6SXNzdWUzODEyNjEwNjU=","number":536,"title":"FYI: TLS1.2 + 1.3 SuperCooKey","user":{"login":"Thorin-Oakenpants","id":16656956,"node_id":"MDQ6VXNlcjE2NjU2OTU2","avatar_url":"https://avatars3.githubusercontent.com/u/16656956?v=4","gravatar_id":"","url":"https://api.github.com/users/Thorin-Oakenpants","html_url":"https://github.com/Thorin-Oakenpants","followers_url":"https://api.github.com/users/Thorin-Oakenpants/followers","following_url":"https://api.github.com/users/Thorin-Oakenpants/following{/other_user}","gists_url":"https://api.github.com/users/Thorin-Oakenpants/gists{/gist_id}","starred_url":"https://api.github.com/users/Thorin-Oakenpants/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Thorin-Oakenpants/subscriptions","organizations_url":"https://api.github.com/users/Thorin-Oakenpants/orgs","repos_url":"https://api.github.com/users/Thorin-Oakenpants/repos","events_url":"https://api.github.com/users/Thorin-Oakenpants/events{/privacy}","received_events_url":"https://api.github.com/users/Thorin-Oakenpants/received_events","type":"User","site_admin":false},"labels":[{"id":542297601,"node_id":"MDU6TGFiZWw1NDIyOTc2MDE=","url":"https://api.github.com/repos/ghacksuserjs/ghacks-user.js/labels/FYI","name":"FYI","color":"9CFF9C","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":12,"created_at":"2018-11-15T17:17:50Z","updated_at":"2018-11-21T06:39:38Z","closed_at":null,"author_association":"MEMBER","body":"Article: https://www.privateinternetaccess.com/blog/2018/11/supercookey-a-supercookie-built-into-tls-1-2-and-1-3/\r\nReddit: https://old.reddit.com/r/firefox/comments/9xd0d5/supercookeys_a_supercookie_built_into_the_tls_12/\r\n\r\nStill digesting it...\r\n\r\nEdit:\r\n\r\n> To mitigate this, you need to be able to disable both TLS 1.2 and TLS 1.3 session resumption. There are four settings related to this scenario that we have to change to fully address the problem.\r\n> \r\n> security.ssl.disable_session_identifiers (hidden feature)\r\n> security.ssl.enable_false_start\r\n> security.tls.enable_0rtt_data\r\n> privacy.firstparty.isolate\r\n\r\n- :heavy_check_mark: `1203` : security.ssl.disable_session_identifiers = true\r\n- :x: security.ssl.enable_false_start = false\r\n- :heavy_check_mark: `1205` : security.tls.enable_0rtt_data = false\r\n- :heavy_check_mark: `4001` : privacy.firstparty.isolate = true"},"comment":{"url":"https://api.github.com/repos/ghacksuserjs/ghacks-user.js/issues/comments/440554718","html_url":"https://github.com/ghacksuserjs/ghacks-user.js/issues/536#issuecomment-440554718","issue_url":"https://api.github.com/repos/ghacksuserjs/ghacks-user.js/issues/536","id":440554718,"node_id":"MDEyOklzc3VlQ29tbWVudDQ0MDU1NDcxOA==","user":{"login":"Thorin-Oakenpants","id":16656956,"node_id":"MDQ6VXNlcjE2NjU2OTU2","avatar_url":"https://avatars3.githubusercontent.com/u/16656956?v=4","gravatar_id":"","url":"https://api.github.com/users/Thorin-Oakenpants","html_url":"https://github.com/Thorin-Oakenpants","followers_url":"https://api.github.com/users/Thorin-Oakenpants/followers","following_url":"https://api.github.com/users/Thorin-Oakenpants/following{/other_user}","gists_url":"https://api.github.com/users/Thorin-Oakenpants/gists{/gist_id}","starred_url":"https://api.github.com/users/Thorin-Oakenpants/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Thorin-Oakenpants/subscriptions","organizations_url":"https://api.github.com/users/Thorin-Oakenpants/orgs","repos_url":"https://api.github.com/users/Thorin-Oakenpants/repos","events_url":"https://api.github.com/users/Thorin-Oakenpants/events{/privacy}","received_events_url":"https://api.github.com/users/Thorin-Oakenpants/received_events","type":"User","site_admin":false},"created_at":"2018-11-21T06:39:38Z","updated_at":"2018-11-21T06:39:38Z","author_association":"MEMBER","body":"FYI: https://trac.torproject.org/projects/tor/ticket/28536\r\n\r\nGiven TBB uses FPI (and PB Mode) and uses Tor (changing circuits etc), I doubt this is in their wheelhouse"}}
{"actor":{"display_login":"Thorin-Oakenpants"}}