Delivery-Date: Wed, 13 Jan 2016 05:45:59 -0500
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-3.3 required=5.0 tests=BAYES_00,DKIM_ADSP_ALL,
	DKIM_SIGNED,RCVD_IN_DNSWL_MED,T_DKIM_INVALID,T_RP_MATCHES_RCVD autolearn=ham
	version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id B5F2D1E0A88;
	Wed, 13 Jan 2016 05:45:57 -0500 (EST)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id 6A1B120AA7;
	Wed, 13 Jan 2016 10:45:53 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id 990A520407
 for <tor-talk@lists.torproject.org>; Wed, 13 Jan 2016 10:45:49 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at 
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id INSeyfbpILwH for <tor-talk@lists.torproject.org>;
 Wed, 13 Jan 2016 10:45:49 +0000 (UTC)
Received: from perdizione.investici.org (perdizione.investici.org
 [94.23.50.208])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client CN "smtp.autistici.org",
 Issuer "Autistici/Inventati Certification Authority" (not verified))
 by eugeni.torproject.org (Postfix) with ESMTPS id 6CC7E203CE
 for <tor-talk@lists.torproject.org>; Wed, 13 Jan 2016 10:45:49 +0000 (UTC)
Received: from [94.23.50.208] (perdizione [94.23.50.208]) (Authenticated
 sender: setthemfree@privacyrequired.com) by localhost (Postfix) with ESMTPSA
 id 5B191120DCE
 for <tor-talk@lists.torproject.org>; Wed, 13 Jan 2016 10:45:45 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=privacyrequired.com;
 s=stigmate; t=1452681945;
 bh=m/WvO1pdWYT+80qQQBt497zCuHxQC3bv2sSZEoDYDiY=;
 h=From:To:Subject:In-Reply-To:References:Date;
 b=KU4NOjfAClLS5TcpSbFwa1IJ4cc5BoiYTPFXl6/qOccPboWSVGFhFKe8Iih8klhEA
 da8Qq0vI64NhDempbhkB9qqz2+62QxndI8jIexaDJahjVrhH2x4psYbrssIIXjJHcj
 SxZB2NqiLy0Du5PgUhJZ6CfowS+6NaKzGakScsEU=
From: Yury Bulka <setthemfree@privacyrequired.com>
To: tor-talk@lists.torproject.org
In-Reply-To: <56962941.1020403@torproject.org> (Georg Koppen's message of
 "Wed, 13 Jan 2016 10:38:57 +0000")
References: <868u3zu5y5.fsf@kitt.localdomain> <5692E9A9.4030705@gmx.com>
 <86pox5vlb9.fsf@kitt.localdomain> <56962941.1020403@torproject.org>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.5 (gnu/linux)
Date: Wed, 13 Jan 2016 12:45:43 +0200
Message-ID: <867fjdvju0.fsf@kitt.localdomain>
MIME-Version: 1.0
Subject: Re: [tor-talk] What is "cookie protections"?
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

Georg Koppen <gk@torproject.org> writes:

> Yury Bulka:
>> Thanks for all the info. Yeah, I browse with third party cookies
>> disabled. Additionally, I use two windows of TBB - one for the few sites
>> where I stay logged in, and the other, in Private Browsing mode, for
>> everything else.
>> 
>> Regarding the "cookie protections" menu item, it only shows up in the
>> Tor button's menu if the "Don't record history" checkbox is unchecked in
>> Privacy and Security settings.
>
> For what it is worth cookie protections are still broken in current Tor
> Browser versions: https://trac.torproject.org/projects/tor/ticket/10353
>
From the ticket: "This means that the Cookie Protections Dialog (and
Firefox's own Cookie Dialog) are always empty in the default TBB
configuration, *unless the user selects to enable history*" (emphasis mine.)

I.e. it's only broken if one is using the Private Browsing mode - and in
this case it is properly hidden. If I do record history however, the
cookie protections dialog is not empty.

But anyway I'd like to know what is the intended purpose of it (I think
I have already deduced it, but I'd like to hear other people's theories
about it).

Best,
Yury.

-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

