[tor-bugs] #2340 [Tor bundles/installation]: GPG signatures do not authenticate filenames

[Tor Bug Tracker & Wiki]

#2340: GPG signatures do not authenticate filenames
--------------------------------------+-------------------------------------
 Reporter:  rransom                   |       Owner:  rransom     
     Type:  defect                    |      Status:  needs_review
 Priority:  critical                  |   Milestone:              
Component:  Tor bundles/installation  |     Version:              
 Keywords:                            |      Parent:              
--------------------------------------+-------------------------------------

Comment(by nickm):

 note from IRC discussion: if we make a header or a footer of the signed
 thing into something with a fixed format, it will be easier to machine-
 verify in the future if we want too.  Something based on (part of?) or
 incorporated into Thandy is an easier longterm solution , but this script
 will IMO do in the short term.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/2340#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online