[tor-bugs] #13607 [TorBirdy]: TorBirdy should have an option to distrust all certificate authorities

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu Nov 13 18:33:10 UTC 2014


#13607: TorBirdy should have an option to distrust all certificate authorities
-----------------------------+---------------------
     Reporter:  sajolida     |      Owner:  ioerror
         Type:  enhancement  |     Status:  new
     Priority:  normal       |  Milestone:
    Component:  TorBirdy     |    Version:
   Resolution:               |   Keywords:
Actual Points:               |  Parent ID:
       Points:               |
-----------------------------+---------------------

Comment (by sukhbir):

 While I don't disagree with your general idea, disabling all certificates
 and then expecting users to understand TOFU and guiding them do it is
 likely not a good idea. Remember that the intended audience is users who
 might not even know what a certificate is (or even care). Asking them to
 add exception for their mail provider is probably not going to work out
 well.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13607#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list