[tor-bugs] #27551 [Applications/Tor Browser]: Build HTTPS Everywhere with the SecureDrop custom ruleset update channel

Tor Bug Tracker & Wiki blackhole at torproject.org
Fri Sep 7 20:18:22 UTC 2018


#27551: Build HTTPS Everywhere with the SecureDrop custom ruleset update channel
--------------------------------------+--------------------------
 Reporter:  legind                    |          Owner:  tbb-team
     Type:  enhancement               |         Status:  new
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:  tbb-rbm                   |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+--------------------------

Comment (by arma):

 Replying to [ticket:27551 legind]:
 > Understandably, Tor Browser may be wary of adding an additional update
 channel, maintained by another entity, which has the arbitrary ability to
 redirect URLs.  That's why HTTPS Everywhere has added the concept of
 `scope` to update channels.

 Woo -- thanks for thinking ahead to the obvious concern, and doing
 something about it. :)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27551#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list