[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #18326 [Tor Browser]: Creating incremental MAR files should not include Tor Browser version in meta data

#18326: Creating incremental MAR files should not include Tor Browser version in
meta data
-------------------------+--------------------------
 Reporter:  gk           |          Owner:  tbb-team
     Type:  defect       |         Status:  new
 Priority:  Medium       |      Milestone:
Component:  Tor Browser  |        Version:
 Severity:  Normal       |     Resolution:
 Keywords:  tbb-gitian   |  Actual Points:
Parent ID:  #18325       |         Points:
  Sponsor:               |
-------------------------+--------------------------

Comment (by gk):

 Replying to [comment:2 mcs]:
 > I think we do need this but I am not 100% sure. Mozilla embedded the
 version number in the MAR file to ensure that a MAR won't be applied that
 downgrades the browser to an older version.

 Hmm, if this is actually a security feature then this is fine to me and I
 think we might have to live with it. I don't remember that one in
 particular to be honest. But it's been a while that I looked closer at the
 updater related code...

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18326#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs