[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
[tor-bugs] #18940 [- Select a component]: Danger : verifying digital certificate and fake response !
#18940: Danger : verifying digital certificate and fake response !
--------------------------------------+-----------------
Reporter: safeless | Owner:
Type: defect | Status: new
Priority: Medium | Milestone:
Component: - Select a component | Version:
Severity: Normal | Keywords:
Actual Points: | Parent ID:
Points: | Reviewer:
Sponsor: |
--------------------------------------+-----------------
when I try to do Integrity check (verify torbrowser-install-5.5.5.exe
Digital signatures )
explorer.exe connects to " 93.184.220.29:80 tcp " (connections on port
number 80 is not encrypted ) I think explorer.exe tries to ask a trusted
server about the file's digital certificate ; but
****
Iran cyber Army can generate a fake response for this! (connections on
port number 80 is not encrypted )
*****
it should be Encrypted
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18940>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs