70
edits
Security/Anonymous Browsing: Difference between revisions
Jump to navigation
Jump to search
→SSL
(→SSL) |
|||
| Line 123: | Line 123: | ||
==SSL== | ==SSL== | ||
SSL | |||
The SSL Layer currently exposes a few different pieces of identifying information that would need to be altered while the user is in anonymous browsing mode. Stored client certificates must be disabled during the mode. All current SSL session identifiers must be cleared upon entering the mode. | |||
Stored server and CA certificates may also need to be optionally disabled, though this should be left to user preference. | |||
Finally, the SSL handshake also contains a timestamp from the client. A small random, per-domain offset could be added to it, but since it is already truncated to the second, this may not be terribly important. | |||
==Form Fill== | ==Form Fill== | ||