Re: [tor-bugs] #31168 [Webpages/Website]: audit openpgp keys for flooding

[Tor Bug Tracker & Wiki]

#31168: audit openpgp keys for flooding
--+
 Reporter:  anarcat   |  Owner:  hiro
 Type:  task  | Status:  closed
 Priority:  Medium|  Milestone:
Component:  Webpages/Website  |Version:
 Severity:  Normal| Resolution:  fixed
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+

Comment (by anarcat):

 i think the only thing that might remain here are the *other* signing keys
 listed in the 2019 document, but i guess we can live with that for now...

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #31168 [Webpages/Website]: audit openpgp keys for flooding

[Tor Bug Tracker & Wiki]

#31168: audit openpgp keys for flooding
--+
 Reporter:  anarcat   |  Owner:  hiro
 Type:  task  | Status:  closed
 Priority:  Medium|  Milestone:
Component:  Webpages/Website  |Version:
 Severity:  Normal| Resolution:  fixed
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+
Changes (by emmapeel):

 * status:  new => closed
 * resolution:   => fixed


Comment:

 merged, thanks!

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #31168 [Webpages/Website]: audit openpgp keys for flooding

[Tor Bug Tracker & Wiki]

#31168: audit openpgp keys for flooding
--+--
 Reporter:  anarcat   |  Owner:  hiro
 Type:  task  | Status:  new
 Priority:  Medium|  Milestone:
Component:  Webpages/Website  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by ggus):

 Ok, submmitted a merge request fixing Pili's 1 and 2.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #31168 [Webpages/Website]: audit openpgp keys for flooding

[Tor Bug Tracker & Wiki]

#31168: audit openpgp keys for flooding
--+--
 Reporter:  anarcat   |  Owner:  hiro
 Type:  task  | Status:  new
 Priority:  Medium|  Milestone:
Component:  Webpages/Website  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by pili):

 The instructions to verify signatures are actually outlined in the support
 portal: https://support.torproject.org/tbb/how-to-verify-signature/

 We probably want to:

 1. Remove the link to ​https://2019.www.torproject.org/docs/signing-
 keys.html.en from the support portal page
 (1.a.) Replace the above link with another link/the correct content
 2. Update the "verify signature" instructions to not point to pool.sks-
 keyservers.net

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #31168 [Webpages/Website]: audit openpgp keys for flooding

[Tor Bug Tracker & Wiki]

#31168: audit openpgp keys for flooding
--+--
 Reporter:  anarcat   |  Owner:  hiro
 Type:  task  | Status:  new
 Priority:  Medium|  Milestone:
Component:  Webpages/Website  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by arma):

 I hear that the tor browser signing key will soon be reachable from
 https://openpgpkey.torproject.org/.well-
 known/openpgpkey/torproject.org/hu/kounek7zrdx745qydx6p59t9mqjpuhdf

 It would be a good idea to point to that location rather than giving
 people instructions to get a broken key from a broken keyserver.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #31168 [Webpages/Website]: audit openpgp keys for flooding

[Tor Bug Tracker & Wiki]

#31168: audit openpgp keys for flooding
--+--
 Reporter:  anarcat   |  Owner:  hiro
 Type:  task  | Status:  new
 Priority:  Medium|  Milestone:
Component:  Webpages/Website  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by weasel):

 2019.www.tpo is an *archive* of the *old* website.  It should not be
 changed.

 If anything, we might want to set it to send a noindex robots header

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #31168 [Webpages/Website]: audit openpgp keys for flooding

[Tor Bug Tracker & Wiki]

#31168: audit openpgp keys for flooding
--+--
 Reporter:  anarcat   |  Owner:  hiro
 Type:  task  | Status:  new
 Priority:  Medium|  Milestone:
Component:  Webpages/Website  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by anarcat):

 a workaround is implemented through WKD in #31184, so this is just a
 matter of making sure we don't link to bad keys in the live docs.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs