[tor-bugs] #8645 [Pluggable transport]: Pluggable transports bundles warn of need to upgrade when no new version is yet available

[Tor Bug Tracker & Wiki]

#8645: Pluggable transports bundles warn of need to upgrade when no new version is
yet available
---------------------------------+------------------------------------------
 Reporter:  dcf                  |          Owner:  asn
     Type:  defect               |         Status:  new
 Priority:  normal               |      Milestone:     
Component:  Pluggable transport  |        Version:     
 Keywords:  flashproxy           |         Parent:     
   Points:                       |   Actualpoints:     
---------------------------------+------------------------------------------

Comment(by dcf):

 Lunar proposes putting separate lines with independent version numbers for
 PT bundles in RecommendedTBBVersions. Using a naming convention from
 #8644, if the X.Y.Z-alpha-1-pt1 PT bundle is still safe to use, the file
 might look like
 {{{
 [
 /* ... stable bundles ... */
 "X.Y.Z-alpha-2-MacOS",
 "X.Y.Z-alpha-2-Windows",
 "X.Y.Z-alpha-2-Linux",
 "X.Y.Z-alpha-1-pt1-MacOS",
 "X.Y.Z-alpha-1-pt1-Windows",
 "X.Y.Z-alpha-1-pt1-Linux"
 ]
 }}}

 What to do if the old PT bundle is not safe to use (i.e., if TBB was
 updated because of a security vulnerability) is another question. We want
 to alert the user somehow, with a message other than "Download new
 version." I think it might be nice to have separate switches for "this
 version is safe to use" and "there is a newer version." This may not fit
 how RecommendedTBBVersions works, however.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/8645#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online