-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 > - I assume requests to mozilla are encrypted + authenticated
This assumption was and is wrong. Disabling such insecure update paths makes sense. -----BEGIN PGP SIGNATURE----- iF4EAREKAAYFAk4Gea4ACgkQyM26BSNOM7amQAD/fWgEnSAetF6rOEganx9KEjNm 7N8b2fXupe2pL5wU+oAA/RId4BbpYhFImGDRgz0/9cetJcWe0jbA4OPQ+7Cc9Ym8 =cyJC -----END PGP SIGNATURE----- _______________________________________________ tor-talk mailing list [email protected] https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
