[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #17443 [Tor]: tor-gencert --passphrase-fd improperly checks for newline
#17443: tor-gencert --passphrase-fd improperly checks for newline
------------------------------------------------+--------------------------
Reporter: junglefowl | Owner:
Type: defect | Status:
Priority: Medium | needs_review
Component: Tor | Milestone: Tor:
Severity: Normal | 0.2.8.x-final
Keywords: security 027-backport 026-backport | Version: Tor:
Parent ID: | 0.2.7.4-rc
Sponsor: | Resolution:
| Actual Points:
| Points:
------------------------------------------------+--------------------------
Comment (by nickm):
I don't see how this is security unless the user is sending
unauthenticated data as their passphrase? I think it should be fine to
just get it in 0.2.8.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/17443#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs