[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #3555 [Tor Browser]: Pin *.torproject.org's certs in TBB

#3555: Pin *.torproject.org's certs in TBB
-----------------------------+-------------------------------
     Reporter:  tagnaq       |      Owner:  cyperpunks
         Type:  enhancement  |     Status:  assigned
     Priority:  normal       |  Milestone:
    Component:  Tor Browser  |    Version:
   Resolution:               |   Keywords:  tbb-firefox-patch
Actual Points:               |  Parent ID:
       Points:               |
-----------------------------+-------------------------------

Comment (by vynX):

 Arma, we are talking about Tor Browser the way it gets shipped here, it
 should know its own onions and it doesn't take any extra certificate
 pinning implementation to know them â it is enough to have the right
 .onion names in all of the default URLs that are shipped with the browser.
 So the problem of users not being able to memorize onion addresses except
 for Facebook's and mine, with all due respect, doesn't exist in this
 constellation. Also I know of trusted Tor developers owning powerful
 multi-processor machines in their trusted homes capable of generating some
 really neat and memorizable torproject12core.onion address.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3555#comment:27>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs