[tor-bugs] #3555 [Tor bundles/installation]: TBB: hardcode SSL cert check to prevent MITM

[Tor Bug Tracker & Wiki]

#3555: TBB: hardcode SSL cert check to prevent MITM
--------------------------------------+-------------------------------------
 Reporter:  tagnaq                    |          Owner:  erinn
     Type:  defect                    |         Status:  new  
 Priority:  normal                    |      Milestone:       
Component:  Tor bundles/installation  |        Version:       
 Keywords:                            |         Parent:       
   Points:                            |   Actualpoints:       
--------------------------------------+-------------------------------------

Comment(by mikeperry):

 We could also sign the Torbutton update.rdf with
 https://wiki.mozilla.org/McCoy.. It is GUI only though, so it would mean
 torbutton release xpi creation can't be fully scripted...

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3555#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online