#2340: GPG signatures do not authenticate filenames
--------------------------------------+-------------------------------------
Reporter: rransom | Owner: rransom
Type: defect | Status: needs_review
Priority: critical | Milestone:
Component: Tor bundles/installation | Version:
Keywords: | Parent:
--------------------------------------+-------------------------------------
Comment(by nickm):
note from IRC discussion: if we make a header or a footer of the signed
thing into something with a fixed format, it will be easier to machine-
verify in the future if we want too. Something based on (part of?) or
incorporated into Thandy is an easier longterm solution , but this script
will IMO do in the short term.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/2340#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs