Jump to content

Tor Browser 6.0 Based on Firefox 45-ESR Released with Updated Security Features


Batu69

Recommended Posts

Tor Browser adds better HTML5 support, removes SHA-1

tor-browser-6-0-based-on-firefox-45-esr-

Tor browser 6.0

The Tor Project released today version 6.0 of its famous privacy-first Web browser, which is now based on the Firefox 45-ESR release, and features better HTML5 support and updated security features to safeguard encrypted traffic and its updates mechanism.

There are a lot of people that hate the recent Australis-based Firefox versions, among which 45-ESR is one, mainly due to its revamped GUI that most users considered non-Firefoxey or too-Chromey. Nevertheless, the Web can get really lonely if the browser you're on doesn't fully support the modern technologies on which most websites are being built today.

This update doesn't necessarily mean new features only, but throwing out the old as well, a picture perfect image of what the latest Tor Browser stable version is.

Better HTML5 support means less Flash

Being based on Firefox 45-ESR, Tor Browser 6.0 automatically brings in top-of-the-line HTML5 support, which should make it much easier now to leave your Flash plugin turned off on the majority of sites you're visiting.

Since Flash can give away details like your IP, you should be staying away from Flash altogether if you value Tor more for its privacy features rather than for its ability to throw a different IP at you every time you boot it up.

Secondly, Firefox 45-ESR also features support for the Push API for dynamic notifications, but also better support for the latest JavaScript standard, such as ES6 classes.

The Tor team also brought in an important fix for Mac OS X, where the Tor Browser from now on will be using code-signing in order to avoid getting blocked by OS X's GateKeeper security app.

Tor Browser 6.0 says good bye to SHA-1

The biggest changes, or at least in our eyes, are the modifications made to the browser's encryption layer. Since the Tor Browser works on top of an encryption-first protocol, support for modern cryptography must be up to par with such a reputation.

As such, Tor Browser 6.0 has removed support for SHA-1 certificates, something that its bigger brothers such as Firefox, Chrome, and Edge have announced this past winter. These browsers are a little bit tardy, mainly due to their huge userbases and will be taking the first steps to remove SHA-1 at the end of June this year, and then a permanent step at the start of 2017.

Furthermore, the latest Tor Browser version also comes with a better update mechanism, which now checks both the update package's signature and hash before running the update file.

The team also fixed a simple yet serious DLL hijacking issue, and applied some quick fixes here and there to patch some urgent bugs, but the Project promised to deliver complete fixes for these issues in later versions.

Tor partially fixes issues with its default search engine provider

Last but not least, the Tor Project also clarified the situation of its default search engine, Disconnect, which is now displaying search results via DuckDuckGo's API, instead of Google.

The Tor team explains that until Disconnect clarifies its situation with Google, the Tor Project has specifically asked the Disconnect team to supply them with DuckDuckGo search results instead of Bing, which they described as "basically unacceptable quality-wise."

The Tor Browser 6.0 is available for download for the Linux, Mac, and Windows operating systems via Softpedia, but if you already have it installed, you should also be able to upgrade via its built-in updater. A full Tor Browser 6.0 changelog is also available.

Article source

Link to comment
Share on other sites


  • 2 years later...
  • Replies 1
  • Views 975
  • Created
  • Last Reply

Archived

This topic is now archived and is closed to further replies.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...