[tor-bugs] #13684 [Tor Browser]: Backport of Mozilla #1066190

[Tor Bug Tracker & Wiki]

#13684: Backport of Mozilla #1066190
---------------------------------+------------------------------
     Reporter:  arthuredelstein  |      Owner:  tbb-team
         Type:  defect           |     Status:  needs_review
     Priority:  normal           |  Milestone:
    Component:  Tor Browser      |    Version:
   Resolution:                   |   Keywords:  MikePerry201411R
Actual Points:                   |  Parent ID:
       Points:                   |
---------------------------------+------------------------------

Comment (by mikeperry):

 What's Mozilla's plan for this fix? I haven't seen any mention of a new
 chemspill release, and I can't access that bug in their bugtracker.

 I assume this is pinning-related and not going to be backported to 31ESR
 for that reason, but has this patch already been merged to mozilla-central
 and tagged in an official release? Taking a rush security fix before its
 ready might be asking for trouble, especially if it is some subtle
 interaction between cert validation and pinning.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13684#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online