[tor-bugs] #3555 [Tor bundles/installation]: TBB: hardcode SSL cert check to prevent MITM

[Tor Bug Tracker & Wiki]

#3555: TBB: hardcode SSL cert check to prevent MITM
--------------------------------------+-------------------------------------
 Reporter:  tagnaq                    |          Owner:  erinn
     Type:  defect                    |         Status:  new  
 Priority:  normal                    |      Milestone:       
Component:  Tor bundles/installation  |        Version:       
 Keywords:                            |         Parent:       
   Points:                            |   Actualpoints:       
--------------------------------------+-------------------------------------
 TBB should do a hardcoded check for the *.tpo certificate to prevent MITM
 attacks.

 Mozilla does the same for their update mechanism (addons and browser).

 https://lists.torproject.org/pipermail/tor-talk/2011-July/020784.html

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3555>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online