[tor-bugs] #24138 [Applications/Tor Browser]: Older version of Tor Browser not updating

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed Nov 8 06:04:00 UTC 2017


#24138: Older version of Tor Browser not updating
--------------------------------------+-----------------------------------
 Reporter:  lizzard                   |          Owner:  tbb-team
     Type:  defect                    |         Status:  needs_information
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:                            |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+-----------------------------------

Comment (by tom):

 Sorry to be a nag, but are you certain that this won't happen in the
 future under similar circumstances?

 To address pinned cert rollover, most browsers will not enforce pins N
 months after the build date of the browser.

 To address the 'several version update' FF does just that. We will tag
 watershed releases that all users must update through. So if you're on
 firefox 20 you may have to upgrade through (hypothetical example)  20 ->
 28 -> 35 -> 42 -> 50 -> 56.  Watersheds aren't planned, they just occur
 when they're necessary for things like mandatory SSE2 support, signing key
 rollover, etc.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/24138#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list