[tbb-bugs] #18287 [Applications/Tor Browser]: Use SHA-2 signature for Tor Browser setup executables

Tor Bug Tracker & Wiki blackhole at torproject.org
Tue Feb 20 13:08:10 UTC 2018


#18287: Use SHA-2 signature for Tor Browser setup executables
------------------------------------------------+--------------------------
 Reporter:  gk                                  |          Owner:  tbb-team
     Type:  enhancement                         |         Status:  assigned
 Priority:  Medium                              |      Milestone:
Component:  Applications/Tor Browser            |        Version:
 Severity:  Normal                              |     Resolution:
 Keywords:  tbb-security, TorBrowserTeam201802  |  Actual Points:
Parent ID:                                      |         Points:
 Reviewer:                                      |        Sponsor:
------------------------------------------------+--------------------------

Comment (by cypherpunks):

 Replying to [ticket:18287 gk]:
 > #17870
 > So, we are doing the same as Mozilla right now: SHA-1 signature with a
 SHA-2 code signing certificate.
 But not in Win64 builds! You should reopen that ticket.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18287#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list