[tor-bugs] #2340 [Tor Browser]: GPG signatures do not authenticate filenames
Tor Bug Tracker & Wiki
blackhole at torproject.org
Tue Jan 13 00:47:21 UTC 2015
#2340: GPG signatures do not authenticate filenames
-----------------------------+--------------------------
Reporter: rransom | Owner: rransom
Type: defect | Status: assigned
Priority: critical | Milestone:
Component: Tor Browser | Version:
Resolution: | Keywords: needs-triage
Actual Points: | Parent ID:
Points: |
-----------------------------+--------------------------
Comment (by proper):
Possible solution:
use OpenPGP notations to sign the names of files to prevent file name
tampering (#14187)
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/2340#comment:22>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list