[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #3555 [Firefox Patch Issues]: TBB: hardcode SSL cert check to prevent MITM

#3555: TBB: hardcode SSL cert check to prevent MITM
----------------------------------+-----------------------------------------
 Reporter:  tagnaq                |          Owner:  mikeperry                    
     Type:  defect                |         Status:  assigned                     
 Priority:  major                 |      Milestone:  TorBrowserBundle 2.3.x-stable
Component:  Firefox Patch Issues  |        Version:                               
 Keywords:                        |         Parent:                               
   Points:                        |   Actualpoints:                               
----------------------------------+-----------------------------------------

Comment(by tagnaq):

 Hi Mike,

 What is the current status on this ticket?
 I still think that cert pinning is very important.
 #5092 mitigates a smaller subset of possible MITM attacks on *.tpo.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3555#comment:16>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs