[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #10836 [TorBirdy]: Enable mail account autoconfig dialog in TorBirdy

#10836: Enable mail account autoconfig dialog in TorBirdy
-----------------------------+-----------------
     Reporter:  ben          |      Owner:  ben
         Type:  enhancement  |     Status:  new
     Priority:  normal       |  Milestone:
    Component:  TorBirdy     |    Version:
   Resolution:               |   Keywords:
Actual Points:               |  Parent ID:
       Points:               |
-----------------------------+-----------------

Comment (by ben):

 > (If Mozilla ever implements arbitrary DNS lookups, we could do both and
 compare the two results.)

 Actually, I am not sure that would even improve things. If the user is
 under attack, you'd have a downgrade attack again, so it could make things
 worse. And you're trusting ISPDB anyway.
 It would be better to make a third party verification by another server in
 another country, which on mismatch alerts some admin that something's
 fishy, not the end users, who can't do anything about it anyway.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10836#comment:15>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs