#3555: TBB: hardcode SSL cert check to prevent MITM
--------------------------------------+-------------------------------------
Reporter: tagnaq | Owner: erinn
Type: defect | Status: new
Priority: normal | Milestone:
Component: Tor bundles/installation | Version:
Keywords: | Parent:
Points: | Actualpoints:
--------------------------------------+-------------------------------------
TBB should do a hardcoded check for the *.tpo certificate to prevent MITM
attacks.
Mozilla does the same for their update mechanism (addons and browser).
https://lists.torproject.org/pipermail/tor-talk/2011-July/020784.html
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3555>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
[email protected]
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs
