Is Tor Browser vulnerable to the HSTS Super Cookies tracking technique described here?
(Initial experimentation with Tor Browser 4.0.3 suggests it's not: I get a different tracking id after selecting "New identity" and revisiting the page)
Tor Stack Exchange is a question and answer site for researchers, developers, and users of Tor. It only takes a minute to sign up.Sign up to join this community
"Implementation Status: Currently, HSTS state is cleared by New Identity, but we don't defend against the creation of these cookies between New Identity invocations" https://www.torproject.org/projects/torbrowser/design/