[tor-bugs] #2340 [Tor Browser]: GPG signatures do not authenticate filenames

Tor Bug Tracker & Wiki blackhole at torproject.org
Tue Jan 13 00:47:21 UTC 2015


#2340: GPG signatures do not authenticate filenames
-----------------------------+--------------------------
     Reporter:  rransom      |      Owner:  rransom
         Type:  defect       |     Status:  assigned
     Priority:  critical     |  Milestone:
    Component:  Tor Browser  |    Version:
   Resolution:               |   Keywords:  needs-triage
Actual Points:               |  Parent ID:
       Points:               |
-----------------------------+--------------------------

Comment (by proper):

 Possible solution:
 use OpenPGP notations to sign the names of files to prevent file name
 tampering (#14187)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/2340#comment:22>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list