[tor-bugs] #31168 [Webpages/Website]: audit openpgp keys for flooding

Tor Bug Tracker & Wiki blackhole at torproject.org
Mon Jul 22 14:27:45 UTC 2019


#31168: audit openpgp keys for flooding
------------------------------+----------------------
 Reporter:  anarcat           |          Owner:  hiro
     Type:  task              |         Status:  new
 Priority:  Medium            |      Milestone:
Component:  Webpages/Website  |        Version:
 Severity:  Normal            |     Resolution:
 Keywords:                    |  Actual Points:
Parent ID:                    |         Points:
 Reviewer:                    |        Sponsor:
------------------------------+----------------------

Comment (by pili):

 The instructions to verify signatures are actually outlined in the support
 portal: https://support.torproject.org/tbb/how-to-verify-signature/

 We probably want to:

 1. Remove the link to ​https://2019.www.torproject.org/docs/signing-
 keys.html.en from the support portal page
 (1.a.) Replace the above link with another link/the correct content
 2. Update the "verify signature" instructions to not point to pool.sks-
 keyservers.net

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/31168#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list