[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #14742 [Tor]: Document or remove the --digests option to tor

#14742: Document or remove the --digests option to tor
-----------------------------+--------------------------------
     Reporter:  nickm        |      Owner:
         Type:  enhancement  |     Status:  new
     Priority:  minor        |  Milestone:  Tor: 0.2.7.x-final
    Component:  Tor          |    Version:
   Resolution:               |   Keywords:
Actual Points:               |  Parent ID:
       Points:               |
-----------------------------+--------------------------------

Comment (by nickm):

 So, here's why I think that the --digests option might not be so useful
 after all:
    * It isn't a security tool.  If somebody is surreptitiously modifying
 your tor source before you compile, they can surreptitiously modify the
 build system so that the digests seem like whatever they want them to.  So
 let's not consider security use-cses.

    * It's mostly redundant with the version number Tor displays when it
 starts.  If you are building from a tarball, you get the exact version
 from the tarball.  If you are building from git, you get the current git
 commit (eg `Tor v0.2.7.0-alpha-dev (git-f70f1d283e4fb468)`).

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/14742#comment:10>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs