[tor-bugs] #3555 [Tor bundles/installation]: TBB: hardcode SSL cert check to prevent MITM

Tor Bug Tracker & Wiki torproject-admin at torproject.org
Mon Sep 12 09:14:20 UTC 2011


#3555: TBB: hardcode SSL cert check to prevent MITM
--------------------------------------+-------------------------------------
 Reporter:  tagnaq                    |          Owner:  mikeperry                    
     Type:  defect                    |         Status:  assigned                     
 Priority:  blocker                   |      Milestone:  TorBrowserBundle 2.2.x-stable
Component:  Tor bundles/installation  |        Version:                               
 Keywords:                            |         Parent:                               
   Points:                            |   Actualpoints:                               
--------------------------------------+-------------------------------------
Changes (by mikeperry):

  * keywords:  MikePerryIteration20110911 =>
  * points:  1 =>


Comment:

 This is not 1 point. Need to decide if McCoy signing is worth the pain, or
 if we should just cross our fingers and pray for real pinning.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3555#comment:12>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list