[tor-bugs] #13379 [Tor Browser]: Sign our MAR files

[Tor Bug Tracker & Wiki]

#13379: Sign our MAR files
-------------------------+-------------------------------------------------
     Reporter:           |      Owner:  mcs
  mikeperry              |     Status:  needs_review
         Type:  defect   |  Milestone:
     Priority:  major    |    Version:
    Component:  Tor      |   Keywords:  tbb-security, TorBrowserTeam201411R
  Browser                |  Parent ID:
   Resolution:           |
Actual Points:           |
       Points:           |
-------------------------+-------------------------------------------------

Comment (by gk):

 Replying to [comment:14 mcs]:
 > The tor-browser changes are ready for review.  The patches may be found
 on a branch named bug13379-01 in user/brade/tor-browser.git; that is,
 here:
 >
 > https://gitweb.torproject.org/user/brade/tor-
 browser.git/shortlog/refs/heads/bug13379-01

 Looks good to me. Any reason for
 {{{
 -  nss/cmd/certutil \
 }}}
 in Makefile.in in security/build? I'd be happy if others would have a look
 at https://gitweb.torproject.org/user/brade/tor-
 browser.git/commit/2d7b84ca53c75686daebf1e203eb5369c24f965e, too.

 Gonna test that shortly but it seems to me that the signing can be done
 offline, right? Like, I could download the MAR files, get offline, enter
 my passphrase, get all MAR files signed, get online again and upload them?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13379#comment:23>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online