[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #2340 [Tor Browser]: GPG signatures do not authenticate filenames

#2340: GPG signatures do not authenticate filenames
-----------------------------+--------------------------
     Reporter:  rransom      |      Owner:  rransom
         Type:  defect       |     Status:  assigned
     Priority:  critical     |  Milestone:
    Component:  Tor Browser  |    Version:
   Resolution:               |   Keywords:  needs-triage
Actual Points:               |  Parent ID:
       Points:               |
-----------------------------+--------------------------

Comment (by proper):

 Possible solution:
 use OpenPGP notations to sign the names of files to prevent file name
 tampering (#14187)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/2340#comment:22>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs