[tor-bugs] #13379 [Tor Browser]: Sign our MAR files

[Tor Bug Tracker & Wiki]

#13379: Sign our MAR files
-------------------------+-------------------------------------------------
     Reporter:           |      Owner:  mcs
  mikeperry              |     Status:  needs_review
         Type:  defect   |  Milestone:
     Priority:  major    |    Version:
    Component:  Tor      |   Keywords:  tbb-security,
  Browser                |  TorBrowserTeam201412,TorBrowserTeam201412R
   Resolution:           |  Parent ID:
Actual Points:           |
       Points:           |
-------------------------+-------------------------------------------------

Comment (by gk):

 Replying to [comment:43 gk]:
 > And one request: Could you make the path to the nssdb configurable by an
 environment variable (e.g. NSSDBPATH)? For security reasons I plan to keep
 my signing keys offline using them offline directly from the storage
 device and hard-coding the path to the database does not work so well
 under that scenario.

 Oh, and please make the name of the cert configurable as well (I think via
 environment variable might be enough for now, too) in order to avoid
 bottlenecks from the beginning.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13379#comment:44>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online