[tor-bugs] #14742 [Tor]: Document or remove the --digests option to tor

Tor Bug Tracker & Wiki blackhole at torproject.org
Sat Mar 14 16:23:21 UTC 2015


#14742: Document or remove the --digests option to tor
-----------------------------+--------------------------------
     Reporter:  nickm        |      Owner:
         Type:  enhancement  |     Status:  new
     Priority:  minor        |  Milestone:  Tor: 0.2.7.x-final
    Component:  Tor          |    Version:
   Resolution:               |   Keywords:
Actual Points:               |  Parent ID:
       Points:               |
-----------------------------+--------------------------------

Comment (by nickm):

 So, here's why I think that the --digests option might not be so useful
 after all:
    * It isn't a security tool.  If somebody is surreptitiously modifying
 your tor source before you compile, they can surreptitiously modify the
 build system so that the digests seem like whatever they want them to.  So
 let's not consider security use-cses.

    * It's mostly redundant with the version number Tor displays when it
 starts.  If you are building from a tarball, you get the exact version
 from the tarball.  If you are building from git, you get the current git
 commit (eg `Tor v0.2.7.0-alpha-dev (git-f70f1d283e4fb468)`).

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/14742#comment:10>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list