[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #8645 [Pluggable transport]: Pluggable transports bundles warn of need to upgrade when no new version is yet available
#8645: Pluggable transports bundles warn of need to upgrade when no new version is
yet available
---------------------------------+------------------------------------------
Reporter: dcf | Owner: asn
Type: defect | Status: new
Priority: normal | Milestone:
Component: Pluggable transport | Version:
Keywords: flashproxy | Parent:
Points: | Actualpoints:
---------------------------------+------------------------------------------
Comment(by dcf):
Lunar proposes putting separate lines with independent version numbers for
PT bundles in RecommendedTBBVersions. Using a naming convention from
#8644, if the X.Y.Z-alpha-1-pt1 PT bundle is still safe to use, the file
might look like
{{{
[
/* ... stable bundles ... */
"X.Y.Z-alpha-2-MacOS",
"X.Y.Z-alpha-2-Windows",
"X.Y.Z-alpha-2-Linux",
"X.Y.Z-alpha-1-pt1-MacOS",
"X.Y.Z-alpha-1-pt1-Windows",
"X.Y.Z-alpha-1-pt1-Linux"
]
}}}
What to do if the old PT bundle is not safe to use (i.e., if TBB was
updated because of a security vulnerability) is another question. We want
to alert the user somehow, with a message other than "Download new
version." I think it might be nice to have separate switches for "this
version is safe to use" and "there is a newer version." This may not fit
how RecommendedTBBVersions works, however.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/8645#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs