[tor-bugs] #34032 [Applications/Tor Browser]: Use Securedrop's Official https-everywhere ruleset

Tue Apr 28 20:44:32 UTC 2020

#34032: Use Securedrop's Official https-everywhere ruleset
-----------------------------------------------+--------------------------
 Reporter:  sysrqb                             |          Owner:  tbb-team
     Type:  defect                             |         Status:  closed
 Priority:  Medium                             |      Milestone:
Component:  Applications/Tor Browser           |        Version:
 Severity:  Normal                             |     Resolution:  fixed
 Keywords:  tbb-9.5a12, TorBrowserTeam202004R  |  Actual Points:
Parent ID:                                     |         Points:
 Reviewer:                                     |        Sponsor:
-----------------------------------------------+--------------------------
Changes (by sysrqb):

 * status:  needs_review => closed
 * keywords:  tbb-9.5a12 TorBrowserTeam202004R => tbb-9.5a12,
     TorBrowserTeam202004R
 * resolution:   => fixed

Comment:

 Thanks! Looks good. I confirmed the jwk is derived from their release key
 (`2224 5C81 E3BA EB41 38B3  6061 310F 5612 00F4 AD77`) - they included a
 script for this.

 I had to install `authlib` from pip :( (oh well).

 I merged the branch with commit `f5bf259fa2f16c68f3dc12bf9e6d28f43ff8d7e1`
 onto `tor-browser-68.7.0esr-9.5-1`.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/34032#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online