[tor-qa] Tor Browser 4.5a3 is ready for testing

[Wilton Gorske]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512


Testing: TorBrowser-4.5a3-osx64_en-US.dmg
Platform: OS X 10.10.1 (14B25)
Processor: 2.3GHz Intel Core i7
Memory: 16 GB 1600 MHz DDR3
Graphics: NVIDIA GeForce GT 750M 2048 MB
Display: 15-inch (2880 x 1800 Retina)

TBB Launches successfully: yes
Connects to the Tor network: yes
Browser toolbars and menus work, tab dragging works: yes

All extensions are present and functional: yes
 - HTTPS-Everywhere 5.0development.2
 - NoScript 2.6.9.10
 - TorButton 1.8.1.3
 - TorLauncher 0.2.7.1

WebBrowsing works as expected
 - HTTP, HTTPS, .onion browsing works (https://facebookcorewwwi.onion/)
 - HTML5 videos work on http://videojs.com/ and YouTube
 - http://ip-check.info/?lang=en - ok
 - https://panopticlick.eff.org/ - only one in 6,087 , 12.57 bits of
                                   identifying information

SOCKS/external apps work as expected: yes (Torbirdy)

SSL client is Improveable according to https://www.howsmyssl.com/.
“Session tickets are not supported in your client. Without them,
services will have a harder time making your client's connections
fast. Generally, clients with ephemeral key support get this for free.”

New signing key imported and checks out (at least Erinn Clark signed it).

No noticeable misbehavior. Great!

Georg Koppen:
> Hi,
> 
> Tor Browser 4.5a3 is up for testing. Bundles can be found on:
> 
> https://people.torproject.org/~gk/builds/4.5a3
> 
> This release is based on Firefox 31.4.0 ESR. As a major feature it 
> contains the code that allows us to enhance the security of our
> updater even further: the next alpha release will be the first one
> that is shipping signed MAR files and the updater is already
> rejecting unsigned MAR files from now on.
> 
> Furthermore, this release includes a new Tor alpha version, 
> 0.2.6.2-alpha, updates meek to 0.15 + makes it working again, and 
> contains a bunch of additional improvements and bug fixes.
> 
> The full changelog for 4.5a3 is:
> 
> Tor Browser 4.5a3 -- Jan 16 2015 * All Platforms * Update Firefox
> to 31.4.0esr * Update Tor to 0.2.6.2-alpha * Update NoScript to
> 2.6.9.10 * Update HTTPS Everywhere to 5.0development.2 * Update
> meek to 0.15 * Update Torbutton to 1.8.1.3 * Bug 13998: Handle
> changes in NoScript 2.6.9.8+ * Bug 14100: Option to hide
> NetworkSettings menuitem * Bug 13079: Option to skip control port
> verification * Bug 13835: Option to change default Tor Browser
> homepage * Bug 11449: Fix new identity error if NoScript is not
> enabled * Bug 13881: Localize strings for tor circuit display * Bug
> 9387: Incorporate user feedback * Bug 13671: Fixup for circuit
> display if bridges are used * Translation updates * Update Tor
> Launcher to 0.2.7.1 * Translation updates * Bug 13379: Sign our MAR
> files * Bug 13788: Fix broken meek in 4.5-alpha series * Bug 13439:
> No canvas prompt for content callers
> 
> Note: from now on there is a new signing key we use for the alpha 
> releases which will eventually replace the one currently used for
> the stable series as well (see: #13407 if you are interested in the
> gory details). You can find its details on our signing key
> website:
> 
> https://www.torproject.org/docs/signing-keys.html.en
> 
> Georg
> 
> 
> 
> _______________________________________________ tor-qa mailing
> list tor-qa at lists.torproject.org 
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-qa
> 

-----BEGIN PGP SIGNATURE-----

iQEcBAEBCgAGBQJUua+7AAoJEKxaGCgbBU4MRUgH/0ep6qIMmWwQu04aw3slG/n7
VkgNSUiN/qSGAUCL1nu7jpJlw/uj8zghhonoU7oowdnUYeiNmJcczL+o7kgrFAer
uPDzdB/CvWRQaiP/4OzREgMIcQi+m+ocehzh/5QBRiKD1V30xx4ZOuzp5VU8QLuo
ZaYfABqz5CBubQhTWwKRoWPCWchDwq9PTYAWmf7xojZEyoZVhQ/JoJ2DXVFLZgzb
IoAdo0LMVmtSodGtRgbHZM0OjdLOL33Ij3Bg2L4tFMIYMOGkpORLRW7YcaEXv93n
ty2U/ZMvq1PRhGF9fD/2lJ3SaufWCSPrLKDE6X5ckQwVpoMp2MPSRloZZjJO8W8=
=+ZUE
-----END PGP SIGNATURE-----