[tbb-bugs] #13379 [Tor Browser]: Sign our MAR files

[Tor Bug Tracker & Wiki]

#13379: Sign our MAR files
--------------------------+--------------------------
 Reporter:  mikeperry     |          Owner:  tbb-team
     Type:  defect        |         Status:  new
 Priority:  major         |      Milestone:
Component:  Tor Browser   |        Version:
 Keywords:  tbb-security  |  Actual Points:
Parent ID:                |         Points:
--------------------------+--------------------------
 The MAR format supports embedded signatures. We should make use of this
 and sign our updates with a key that we embed in the browser.

 This will require changes to our build process -- perhaps a post-
 processing signing step for MAR files on a dedicated machine.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13379>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online