[tbb-bugs] #15864 [Tor Browser]: Differentiate between build and release sha256sums.txt

Tor Bug Tracker & Wiki blackhole at torproject.org
Tue Jun 2 05:41:36 UTC 2015


#15864: Differentiate between build and release sha256sums.txt
-------------------------+-------------------------------------------------
     Reporter:           |      Owner:  tbb-team
  mikeperry              |     Status:  new
         Type:  defect   |  Milestone:
     Priority:  normal   |    Version:
    Component:  Tor      |   Keywords:  tbb-4.5-regression,
  Browser                |  TorBrowserTeam201506, tbb-usability
   Resolution:           |  Parent ID:
Actual Points:           |
       Points:           |
-------------------------+-------------------------------------------------
Changes (by mikeperry):

 * keywords:  tbb-4.5-regression, TorBrowserTeam201505, tbb-usability =>
     tbb-4.5-regression, TorBrowserTeam201506, tbb-usability


Comment:

 We went with -unsigned-build.txt. No existing automatic downloaders were
 broken by this change, as we provide redirects for those URLs. We've
 updated the user documentation for advanced users to remove the Windows
 signatures if they wish to verify against the build hashes.

 I'm inclined to call this solved, though we still need to bake in the new
 filenames into the build process, and script the addition of .htaccess.

 I'm not especially motived by the filename authentication issue to special
 case a whole new set of post-signature shasum files just to deal with
 that.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/15864#comment:7>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list