[tor-bugs] #15864 [Tor Browser]: Differentiate between build and release sha256sums.txt

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed May 13 19:07:13 UTC 2015


#15864: Differentiate between build and release sha256sums.txt
-------------------------+-------------------------------------------------
     Reporter:           |      Owner:  tbb-team
  mikeperry              |     Status:  new
         Type:  defect   |  Milestone:
     Priority:  normal   |    Version:
    Component:  Tor      |   Keywords:  tbb-4.5-regression,
  Browser                |  TorBrowserTeam201505, tbb-usability
   Resolution:           |  Parent ID:
Actual Points:           |
       Points:           |
-------------------------+-------------------------------------------------

Comment (by proper):

 Deprecation of sha256sums files is bad. Breaks Tor Browser downloaders
 such as torbrowser-launcher and worsens security.

 sha256sum files helped to authenticate filenames... Because...

 GPG signatures do not authenticate filenames: #2340

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/15864#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list