[tor-talk] automatic Tor browser updates

[Cain Ungothep]

> On 02/08/2016 01:36 AM, Georg Koppen wrote:
> 
>> Mirimir:
>>
>>> When automatically updating, does Tor browser check GPG signatures of
>>> downloaded updates before installing them?
>>
>> The update files are not using GPG signatures (see:
>> https://wiki.mozilla.org/Software_Update:MAR for detailed information
>> about the MAR file format). They are signed, though, and the updater
>> refuses to install the update if the signature is non-existing or wrong.
>>
>> Georg
> 
> Thank you.
> 
> For those who wish to update manually, is it sufficient to toggle
> app.update.auto in about:config to false?

Seems so.  You will still be prompted to update through the MAR system,
but it won't happen automatically.