[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #27220 [Applications/Tor Browser]: Allow TBA to install tor button, tor launcher and https everywhere extensions without signatures
#27220: Allow TBA to install tor button, tor launcher and https everywhere
extensions without signatures
--------------------------------------+--------------------------
Reporter: igt0 | Owner: tbb-team
Type: defect | Status: closed
Priority: Medium | Milestone:
Component: Applications/Tor Browser | Version:
Severity: Normal | Resolution: fixed
Keywords: | Actual Points:
Parent ID: | Points:
Reviewer: | Sponsor:
--------------------------------------+--------------------------
Comment (by gk):
Replying to [comment:12 tom]:
> Can anyone confirm that this doesn't allow someone to install any random
add-on that they name torbutton@xxxxxxxxxxxxxx ?
Good question. I've not looked into the mobile side of this but for the
desktop I wrote up https://lists.torproject.org/pipermail/tbb-
dev/2017-April/000517.html and it seemed to me that we are not in a bad
shape back then.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27220#comment:13>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs