[tbb-bugs] #3555 [Applications/Tor Browser]: Pin *.torproject.org's certs in TBB

Tor Bug Tracker & Wiki blackhole at torproject.org
Fri Sep 21 07:28:31 UTC 2018


#3555: Pin *.torproject.org's certs in TBB
--------------------------------------+--------------------------
 Reporter:  tagnaq                    |          Owner:  tbb-team
     Type:  enhancement               |         Status:  reopened
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:  tbb-firefox-patch         |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+--------------------------

Comment (by skeletonchimp):

 A user posted about this: #6734

 Here: https://blog.torproject.org/comment/277375#comment-277375

 As the user refers to #6734 which is closed, I notice the final post
 refers to #3555. I hope this is the correct ticket to reopen discussion on
 this topic, as per #6734:

 "TBB-Firefox sends OS+kernel in update queries to Mozilla"

 I noticed this issue when I was reviewing 'about:cache?device=memory' in
 Tor Browser 8.0 and noticed a strange link, which led me to
 'about:config'/'extensions.blocklist.url' after discovering the user's
 post.

 Will there be any progress on this issue? Is the TBB user to manually
 blank the Value of extensions.blocklist.url until this is fixed? Would the
 user need to include a modification of extensions.blocklist.enabled to
 false, or would this break too much?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3555#comment:33>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list