[tor-bugs] #8286 [Tor bundles/installation]: Fetch software during TBB build process only over trusted HTTPS

[Tor Bug Tracker & Wiki]

#8286: Fetch software during TBB build process only over trusted HTTPS
--------------------------------------+-------------------------------------
 Reporter:  ioerror                   |          Owner:  erinn       
     Type:  enhancement               |         Status:  needs_review
 Priority:  major                     |      Milestone:              
Component:  Tor bundles/installation  |        Version:              
 Keywords:                            |         Parent:  #8288       
   Points:                            |   Actualpoints:              
--------------------------------------+-------------------------------------

Comment(by proper):

 Replying to [comment:3 arma]:
 > (We're ignoring the question of how the heck we get an authentic version
 of the unauthenticated unsigned thing in the first place, of course.)

 --> #8525 "ask build dependency maintainers to get HTTPS and GPG"

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/8286#comment:8>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online