[tor-bugs] #19491 [Applications/Tor Browser]: HTTPS-Everywhere vanished during update

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu Jun 23 17:42:42 UTC 2016


#19491: HTTPS-Everywhere vanished during update
--------------------------------------+--------------------------
 Reporter:  gk                        |          Owner:  tbb-team
     Type:  task                      |         Status:  new
 Priority:  High                      |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Major                     |     Resolution:
 Keywords:                            |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+--------------------------

Comment (by gk):

 I was under the impression the browser update itself is not touching
 HTTPS-Everywhere. Thus, maybe the update of the add-on itself caused this?
 The user can't rule out that. One thing that came to mind here is that our
 extension signing exception patch plays a role here. But I tested that
 quite thoroughly now again and did not come up with a scenario where this
 breaks and a Mozilla engineer contacted me too stating the patch does what
 we want. So, I am at a loss here.

 While trying to figure out what goes wrong is one important thing maybe we
 can come up with ways to recover from this. Or better: find ways that it
 does not matter even if it happened under the current circumstances. One
 of the things we might do is just disabling the updates for HTTPS-E and
 ship it the same way as we ship Torbutton etc. The updates are not that
 often and that would have other benefits at well. It is hard to tell,
 though, if that would help not knowing the reason for the vanishing
 HTTPS-E. On the other hand there is no report yet from a missing
 Torbutton, so maybe it would? :)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/19491#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list