[tor-bugs] #18940 [- Select a component]: Danger : verifying digital certificate and fake response !

[Tor Bug Tracker & Wiki]

#18940: Danger : verifying digital certificate and  fake response !
--------------------------------------+-----------------
     Reporter:  safeless              |      Owner:
         Type:  defect                |     Status:  new
     Priority:  Medium                |  Milestone:
    Component:  - Select a component  |    Version:
     Severity:  Normal                |   Keywords:
Actual Points:                        |  Parent ID:
       Points:                        |   Reviewer:
      Sponsor:                        |
--------------------------------------+-----------------
 when I try to do Integrity check (verify torbrowser-install-5.5.5.exe
 Digital signatures )
 explorer.exe connects to " 93.184.220.29:80 tcp " (connections on port
 number 80 is not encrypted  ) I think explorer.exe tries to ask a trusted
 server about the file's digital certificate ; but
 ****
 Iran cyber Army can generate a fake response for this!  (connections on
 port number 80 is not encrypted  )
 *****
 it should be  Encrypted

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18940>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online