commit 0a87c99a0ecb8ac28b734b63f1a1349514ba6a97
parent 91fed43fc7dcec01017b0cb7710cd272e168751a
Author: Thorin-Oakenpants <Thorin-Oakenpants@users.noreply.github.com>
Date: Wed, 5 Dec 2018 20:58:07 +0000
1203: ssl session ids are 24hrs
Diffstat:
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/user.js b/user.js
@@ -752,7 +752,7 @@ user_pref("security.ssl.require_safe_negotiation", true);
// user_pref("security.tls.version.min", 3);
user_pref("security.tls.version.max", 4); // 4 = allow up to and including TLS 1.3
/* 1203: disable SSL session tracking (FF36+)
- * SSL Session IDs speed up HTTPS connections (no need to renegotiate) and last for 48hrs.
+ * SSL Session IDs speed up HTTPS connections (no need to renegotiate) and last for 24hrs.
* Since the ID is unique, web servers can (and do) use it for tracking. If set to true,
* this disables sending SSL Session IDs and TLS Session Tickets to prevent session tracking
* [1] https://tools.ietf.org/html/rfc5077