Re: [tor-bugs] #34032 [Applications/Tor Browser]: Use Securedrop's Official https-everywhere ruleset

[Tor Bug Tracker & Wiki]

#34032: Use Securedrop's Official https-everywhere ruleset
---+--
 Reporter:  sysrqb |  Owner:  tbb-team
 Type:  defect | Status:  closed
 Priority:  Medium |  Milestone:
Component:  Applications/Tor Browser   |Version:
 Severity:  Normal | Resolution:  fixed
 Keywords:  tbb-9.5a12, TorBrowserTeam202004R  |  Actual Points:
Parent ID: | Points:
 Reviewer: |Sponsor:
---+--

Comment (by cypherpunks):

 Despite `//` in the links, the ruleset seems to have been updated
 successfully.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #34032 [Applications/Tor Browser]: Use Securedrop's Official https-everywhere ruleset

[Tor Bug Tracker & Wiki]

#34032: Use Securedrop's Official https-everywhere ruleset
---+--
 Reporter:  sysrqb |  Owner:  tbb-team
 Type:  defect | Status:  closed
 Priority:  Medium |  Milestone:
Component:  Applications/Tor Browser   |Version:
 Severity:  Normal | Resolution:  fixed
 Keywords:  tbb-9.5a12, TorBrowserTeam202004R  |  Actual Points:
Parent ID: | Points:
 Reviewer: |Sponsor:
---+--

Comment (by cypherpunks):

 FWIW, the links have the form: `https://securedrop.org/https-everywhere
 //latest-rulesets-timestamp`

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #34032 [Applications/Tor Browser]: Use Securedrop's Official https-everywhere ruleset

[Tor Bug Tracker & Wiki]

#34032: Use Securedrop's Official https-everywhere ruleset
---+--
 Reporter:  sysrqb |  Owner:  tbb-team
 Type:  defect | Status:  closed
 Priority:  Medium |  Milestone:
Component:  Applications/Tor Browser   |Version:
 Severity:  Normal | Resolution:  fixed
 Keywords:  tbb-9.5a12, TorBrowserTeam202004R  |  Actual Points:
Parent ID: | Points:
 Reviewer: |Sponsor:
---+--
Changes (by sysrqb):

 * status:  needs_review => closed
 * keywords:  tbb-9.5a12 TorBrowserTeam202004R => tbb-9.5a12,
 TorBrowserTeam202004R
 * resolution:   => fixed


Comment:

 Thanks! Looks good. I confirmed the jwk is derived from their release key
 (`2224 5C81 E3BA EB41 38B3  6061 310F 5612 00F4 AD77`) - they included a
 script for this.

 I had to install `authlib` from pip :( (oh well).

 I merged the branch with commit `f5bf259fa2f16c68f3dc12bf9e6d28f43ff8d7e1`
 onto `tor-browser-68.7.0esr-9.5-1`.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #34032 [Applications/Tor Browser]: Use Securedrop's Official https-everywhere ruleset

[Tor Bug Tracker & Wiki]

#34032: Use Securedrop's Official https-everywhere ruleset
--+
 Reporter:  sysrqb|  Owner:  tbb-team
 Type:  defect| Status:
  |  needs_review
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:  tbb-9.5a12 TorBrowserTeam202004R  |  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+
Changes (by acat):

 * status:  new => needs_review
 * keywords:  tbb-9.5a12 => tbb-9.5a12 TorBrowserTeam202004R


Comment:

 Patch for review in https://github.com/acatarineu/tor-browser/commit/34032
 (0052c74b743756dafa4f3614f559dd8f8d1645c2).

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #34032 [Applications/Tor Browser]: Use Securedrop's Official https-everywhere ruleset

[Tor Bug Tracker & Wiki]

#34032: Use Securedrop's Official https-everywhere ruleset
--+--
 Reporter:  sysrqb|  Owner:  tbb-team
 Type:  defect| Status:  new
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:  tbb-9.5a12|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--
Changes (by sysrqb):

 * keywords:   => tbb-9.5a12


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

[tor-bugs] #34032 [Applications/Tor Browser]: Use Securedrop's Official https-everywhere ruleset

[Tor Bug Tracker & Wiki]

#34032: Use Securedrop's Official https-everywhere ruleset
--+--
 Reporter:  sysrqb|  Owner:  tbb-team
 Type:  defect| Status:  new
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal|   Keywords:
Actual Points:|  Parent ID:
   Points:|   Reviewer:
  Sponsor:|
--+--
 Let's create a fixup for #28005.

 Official ruleset is now: https://securedrop.org/https-everywhere/

 New signing key: https://github.com/freedomofpress/securedrop-https-
 everywhere-ruleset/blob/master/release-pubkey.jwk
 (also in footer of securedrop.org)

 The repository for storing the official HTTPS Everywhere ruleset channel
 is here:
 https://github.com/freedomofpress/securedrop-https-everywhere-ruleset

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs