[tor-bugs] #4234 [Tor Browser]: Investigate the Firefox update process
Tor Bug Tracker & Wiki
torproject-admin at torproject.org
Fri Oct 14 23:16:31 UTC 2011
#4234: Investigate the Firefox update process
-------------------------+--------------------------------------------------
Reporter: mikeperry | Owner: mikeperry
Type: task | Status: new
Priority: major | Milestone: TorBrowserBundle 2.3.x-stable
Component: Tor Browser | Version:
Keywords: | Parent:
Points: | Actualpoints:
-------------------------+--------------------------------------------------
Sure, it's probably not hardened against version downgrade attacks,
interruption attacks, no-progress attacks, and maybe not even against CA
compromises.
But it's gotta be better than nothing, and maybe it is easily serviceable
into something that will work for us.
Users are having a hard time manually working with our TBB packages if
they want to preserve bookmarks, settings, and history, and are getting
themselves into trouble by copying pieces of them over each other
incorrectly while trying to manually upgrade:
https://lists.torproject.org/pipermail/tor-talk/2011-October/021771.html
I think any form of process that automates this for them is a step above
status quo. It's just a matter of finding out if it is significantly less
time+effort to deploy than Thandy, and what the security tradeoffs are.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/4234>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list