#19121: reinstate the update.xml hash check -------------------------------------+------------------------------------- Reporter: mcs | Owner: tbb-team Type: defect | Status: new Priority: Medium | Milestone: Component: Applications/Tor | Version: Browser | Keywords: ff45-esr, Severity: Normal | TorBrowserTeam201605, tbb-6.0-must Actual Points: | Parent ID: Points: | Reviewer: Sponsor: | -------------------------------------+------------------------------------- While working on #18912, Kathy and I discovered the following Mozilla change that causes the update.xml hash check to be skipped when signed MAR files are in use (this change shipped in Firefox 43): https://bugzilla.mozilla.org/show_bug.cgi?id=862173
I think the our philosophy is different than Mozilla's and that we probably want to reinstate the hash check. Mike and Georg, do you agree? -- Ticket URL: <https://trac.torproject.org/projects/tor/ticket/19121> Tor Bug Tracker & Wiki <https://trac.torproject.org/> The Tor Project: anonymity online _______________________________________________ tor-bugs mailing list tor-bugs@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs