I understand Tor is based on Firefox. I haven't had Tor recently, but that was 
my impression when I did use it. If it is and if you don't read all of the 
Firefox Bugzilla bugs implicating security, please look at 
https://bugzilla.mozilla.org/show_bug.cgi?id=1476152 and consider weighing in 
as appropriate.

It's about the Never Remember History setting remembering old history, meaning 
URLs visited. Some of us think that undermines security while some people think 
remembering visited URLs even after a reboot is what it should do. As an 
alternative, I proposed amending the wording "Never Remember History" to 
reflect what the program does, maybe "Never Remember Future History (Keep Old 
History)", but even rewording seems to be in dispute. That's in discussion at 
https://bugzilla.mozilla.org/show_bug.cgi?id=513421 but that's years old and 
still hasn't been implemented. If I were to try to patch it myself, patching 
might take hours and there's substantial risk it would be rolled back by 
another programmer. This is a security leak.
If it could affect Tor, please consider participating or patching.

I Googled all your mailing lists and I don't see this issue.
Best wishes.

-- Nick
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Reply via email to