[tor-bugs] #15864 [Tor Browser]: Differentiate between build and release sha256sums.txt
Tor Bug Tracker & Wiki
blackhole at torproject.org
Wed May 13 19:07:13 UTC 2015
#15864: Differentiate between build and release sha256sums.txt
-------------------------+-------------------------------------------------
Reporter: | Owner: tbb-team
mikeperry | Status: new
Type: defect | Milestone:
Priority: normal | Version:
Component: Tor | Keywords: tbb-4.5-regression,
Browser | TorBrowserTeam201505, tbb-usability
Resolution: | Parent ID:
Actual Points: |
Points: |
-------------------------+-------------------------------------------------
Comment (by proper):
Deprecation of sha256sums files is bad. Breaks Tor Browser downloaders
such as torbrowser-launcher and worsens security.
sha256sum files helped to authenticate filenames... Because...
GPG signatures do not authenticate filenames: #2340
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/15864#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list