[tor-bugs] #3929 [Tor Browser]: Remove CNNIC

[Tor Bug Tracker & Wiki]

#3929: Remove CNNIC
-------------------------+--------------------------------------------------
 Reporter:  mikeperry    |          Owner:  mikeperry                    
     Type:  defect       |         Status:  new                          
 Priority:  normal       |      Milestone:  TorBrowserBundle 2.3.x-stable
Component:  Tor Browser  |        Version:                               
 Keywords:               |         Parent:                               
   Points:               |   Actualpoints:                               
-------------------------+--------------------------------------------------
Changes (by mikeperry):

  * priority:  major => normal


Comment:

 After watching Mozilla deal with the Diginotar fiasco (and the size of the
 patch involved to correctly remove a CA for realz), I am ready to accept
 our overlords in Beijing for a while longer.

 ioerror: I would love to replace the whole CA model, but we need Mozilla
 to provide us with https://bugzilla.mozilla.org/show_bug.cgi?id=644640
 first. Alternatively, Chrome might build this first:
 https://sites.google.com/a/chromium.org/dev/developers/design-
 documents/extensions/proposed-changes/apis-under-development/webrequest-
 ssl-hooks.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3929#comment:8>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online