[tbb-dev] Future of Tor Browser hardened

[teor]

> On 3 Feb 2017, at 08:57, teor <teor2345 at gmail.com> wrote:
> 
>> On 3 Feb 2017, at 08:52, Tom Ritter <tom at ritter.vg> wrote:
>> 
>> I guess what I'm trying to figure out is: if we aggressively move all
>> hardening features we can into Alpha and then release; either the
>> 'Hardened' version is really a Pre-Alpha (with ASAN for catching more
>> bugs) or it's a Debug version. If it's pre-alpha, cool, let's make an
>> alpha, beta, and release channel. If it's Debug, cool, it's Debug. =)
> 
> Core tor just made a similar change in master, expensive hardening is
> now:
> 
>  --enable-fragile-hardening
>                          enable more fragile and expensive compiler
>                          hardening; makes Tor slower
> 
> https://trac.torproject.org/projects/tor/ticket/21290

Also, we added this wiki entry:

https://trac.torproject.org/projects/tor/wiki/doc/TorFragileHardening

This change was prompted by TROVE-2016-12-002:

https://trac.torproject.org/projects/tor/ticket/21018

T

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 842 bytes
Desc: Message signed with OpenPGP
URL: <http://lists.torproject.org/pipermail/tbb-dev/attachments/20170203/c62445b9/attachment.sig>