[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #13607 [TorBirdy]: TorBirdy should have an option to distrust all certificate authorities

#13607: TorBirdy should have an option to distrust all certificate authorities
-----------------------------+---------------------
     Reporter:  sajolida     |      Owner:  ioerror
         Type:  enhancement  |     Status:  new
     Priority:  normal       |  Milestone:
    Component:  TorBirdy     |    Version:
   Resolution:               |   Keywords:
Actual Points:               |  Parent ID:
       Points:               |
-----------------------------+---------------------

Comment (by sukhbir):

 While I don't disagree with your general idea, disabling all certificates
 and then expecting users to understand TOFU and guiding them do it is
 likely not a good idea. Remember that the intended audience is users who
 might not even know what a certificate is (or even care). Asking them to
 add exception for their mail provider is probably not going to work out
 well.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13607#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs