Re: [tor-bugs] #19491 [Applications/Tor Browser]: HTTPS-Everywhere vanished during update

[Tor Bug Tracker & Wiki]

#19491: HTTPS-Everywhere vanished during update
--+---
 Reporter:  gk|  Owner:  tbb-team
 Type:  task  | Status:  needs_information
 Priority:  High  |  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Major | Resolution:
 Keywords:  https-everywhere  |  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+---
Changes (by traumschule):

 * keywords:   => https-everywhere
 * status:  new => needs_information


Comment:

 is this still an issue?

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #19491 [Applications/Tor Browser]: HTTPS-Everywhere vanished during update

[Tor Bug Tracker & Wiki]

#19491: HTTPS-Everywhere vanished during update
--+--
 Reporter:  gk|  Owner:  tbb-team
 Type:  task  | Status:  new
 Priority:  High  |  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Major | Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by gk):

 Interesting that we have #18375 which is from a time before the signing
 requirement started. Might be related?

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #19491 [Applications/Tor Browser]: HTTPS-Everywhere vanished during update

[Tor Bug Tracker & Wiki]

#19491: HTTPS-Everywhere vanished during update
--+--
 Reporter:  gk|  Owner:  tbb-team
 Type:  task  | Status:  new
 Priority:  High  |  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Major | Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by gk):

 Here is another report (https://blog.torproject.org/blog/tor-
 browser-603-released#comment-196593) this time the issue happened with the
 updated HTTPS-Everywhere we shipped with 6.0.3.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #19491 [Applications/Tor Browser]: HTTPS-Everywhere vanished during update

[Tor Bug Tracker & Wiki]

#19491: HTTPS-Everywhere vanished during update
--+--
 Reporter:  gk|  Owner:  tbb-team
 Type:  task  | Status:  new
 Priority:  High  |  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Major | Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by mcs):

 Replying to [comment:2 gk]:
 > I was under the impression the browser update itself is not touching
 HTTPS-Everywhere.

 Our incremental updates replace HTTPS-E (and NoScript) if the extension
 version number changes between Tor Browser releases. But if it does not
 change, the incremental MAR should not contain any HTTPS-E files and
 therefore the version the user had at the time of the update should not be
 touched.

 I do not think there was a change to HTTPS-E between 6.0.1 and 6.0.2. I
 double checked that the win32 6.0.1 -> 6.0.2 incremental MAR files do not
 contain any references to HTTPS-E files (the only things under
 TorBrowser/Data/Browser/profile.default/extensions that are touched are
 the torbutton .xpi and the language pack).

 I also failed to reproduce this problem with a TB 5.5.5 -> 6.0.2 update.
 It seems there must be something different about the user's setup that
 makes this not reproducible for us.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #19491 [Applications/Tor Browser]: HTTPS-Everywhere vanished during update

[Tor Bug Tracker & Wiki]

#19491: HTTPS-Everywhere vanished during update
--+--
 Reporter:  gk|  Owner:  tbb-team
 Type:  task  | Status:  new
 Priority:  High  |  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Major | Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by gk):

 I was under the impression the browser update itself is not touching
 HTTPS-Everywhere. Thus, maybe the update of the add-on itself caused this?
 The user can't rule out that. One thing that came to mind here is that our
 extension signing exception patch plays a role here. But I tested that
 quite thoroughly now again and did not come up with a scenario where this
 breaks and a Mozilla engineer contacted me too stating the patch does what
 we want. So, I am at a loss here.

 While trying to figure out what goes wrong is one important thing maybe we
 can come up with ways to recover from this. Or better: find ways that it
 does not matter even if it happened under the current circumstances. One
 of the things we might do is just disabling the updates for HTTPS-E and
 ship it the same way as we ship Torbutton etc. The updates are not that
 often and that would have other benefits at well. It is hard to tell,
 though, if that would help not knowing the reason for the vanishing
 HTTPS-E. On the other hand there is no report yet from a missing
 Torbutton, so maybe it would? :)

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #19491 [Applications/Tor Browser]: HTTPS-Everywhere vanished during update

[Tor Bug Tracker & Wiki]

#19491: HTTPS-Everywhere vanished during update
--+--
 Reporter:  gk|  Owner:  tbb-team
 Type:  task  | Status:  new
 Priority:  High  |  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Major | Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--
Description changed by gk:

Old description:

> https://blog.torproject.org/blog/tor-browser-601-released#comment-187621
> has a concerning bug report. It says HTTPS-Everywhere has completely
> disappeared during the update. We should find out what happened and fix
> the problem

New description:

 https://blog.torproject.org/blog/tor-browser-601-released#comment-187621
 has a concerning bug report. It says HTTPS-Everywhere has completely
 disappeared during the update. We should find out what happened and fix
 the problem.

--

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

[tor-bugs] #19491 [Applications/Tor Browser]: HTTPS-Everywhere vanished during update

[Tor Bug Tracker & Wiki]

#19491: HTTPS-Everywhere vanished during update
--+--
 Reporter:  gk|  Owner:  tbb-team
 Type:  task  | Status:  new
 Priority:  High  |  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Major |   Keywords:
Actual Points:|  Parent ID:
   Points:|   Reviewer:
  Sponsor:|
--+--
 https://blog.torproject.org/blog/tor-browser-601-released#comment-187621
 has a concerning bug report. It says HTTPS-Everywhere has completely
 disappeared during the update. We should find out what happened and fix
 the problem

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs