From 0a87c99a0ecb8ac28b734b63f1a1349514ba6a97 Mon Sep 17 00:00:00 2001 From: Thorin-Oakenpants Date: Wed, 5 Dec 2018 20:58:07 +0000 Subject: [PATCH] 1203: ssl session ids are 24hrs --- user.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/user.js b/user.js index df2c47e..3e0626d 100644 --- a/user.js +++ b/user.js @@ -752,7 +752,7 @@ user_pref("security.ssl.require_safe_negotiation", true); // user_pref("security.tls.version.min", 3); user_pref("security.tls.version.max", 4); // 4 = allow up to and including TLS 1.3 /* 1203: disable SSL session tracking (FF36+) - * SSL Session IDs speed up HTTPS connections (no need to renegotiate) and last for 48hrs. + * SSL Session IDs speed up HTTPS connections (no need to renegotiate) and last for 24hrs. * Since the ID is unique, web servers can (and do) use it for tracking. If set to true, * this disables sending SSL Session IDs and TLS Session Tickets to prevent session tracking * [1] https://tools.ietf.org/html/rfc5077