[tor-bugs] #12642 [Ooni]: Can Network Attacker Downgrade Dependency Install Security?

[Tor Bug Tracker & Wiki]

#12642: Can Network Attacker Downgrade Dependency Install Security?
---------------------------+---------------------
     Reporter:  earthrise  |      Owner:  hellais
         Type:  defect     |     Status:  new
     Priority:  normal     |  Milestone:
    Component:  Ooni       |    Version:
   Resolution:             |   Keywords:
Actual Points:             |  Parent ID:
       Points:             |
---------------------------+---------------------

Comment (by hellais):

 Another approach could be to upload ooni-backend to pypi and update the
 docs to instruct to download ooni-backend via pip only.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/12642#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online