[tor-bugs] #10946 [TIMB]: Security configuration of Instantbird

[Tor Bug Tracker & Wiki]

#10946: Security configuration of Instantbird
----------------------+---------------------
 Reporter:  sukhbir   |          Owner:
     Type:  task      |         Status:  new
 Priority:  normal    |      Milestone:
Component:  TIMB      |        Version:
 Keywords:  SponsorO  |  Actual Points:
Parent ID:            |         Points:
----------------------+---------------------
 - Disable Instantbird's auto-updater and crash reporter
 - OTR is enabled by default and other non-OTR communication is disabled
 entirely
 - CA verification: TOFU? Pinning?
 - Disable older TLS/SSL suites
 - Ensure that all plugins are disabled (Java, Flash)
 - Ensure that there is a whitelist of the most popular Instantbird
 extensions that we have to check to see if they could introduce leaks

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10946>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online