Are you sure that the releases always have 3 signatures? My worry would
be that maybe one of the devs isn't available and they do a release with
only 2 signatures, and Tor Browser Launcher users won't be able to update.

On 08/02/2014 03:21 PM, Holger Levsen wrote:
> control: forwarded -1 
> https://github.com/micahflee/torbrowser-launcher/issues/113
> 
> Hi,
> 
> On Sonntag, 27. Juli 2014, Holger Levsen wrote:
>> tbb downloads are signed by 3 signatures always, all three of them should
>> be checked and if there are not 3 valid signatures (or an invalid one), it
>> should fail and warn loudly.
> 
> this is being tracked as an upstream feature request now too.
> 
> 
> cheers,
>       Holger
> 
> 

-- 
Micah Lee

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to