[tor-bugs] #14742 [Tor]: Document or remove the --digests option to tor
Tor Bug Tracker & Wiki
blackhole at torproject.org
Sat Mar 14 16:23:21 UTC 2015
#14742: Document or remove the --digests option to tor
-----------------------------+--------------------------------
Reporter: nickm | Owner:
Type: enhancement | Status: new
Priority: minor | Milestone: Tor: 0.2.7.x-final
Component: Tor | Version:
Resolution: | Keywords:
Actual Points: | Parent ID:
Points: |
-----------------------------+--------------------------------
Comment (by nickm):
So, here's why I think that the --digests option might not be so useful
after all:
* It isn't a security tool. If somebody is surreptitiously modifying
your tor source before you compile, they can surreptitiously modify the
build system so that the digests seem like whatever they want them to. So
let's not consider security use-cses.
* It's mostly redundant with the version number Tor displays when it
starts. If you are building from a tarball, you get the exact version
from the tarball. If you are building from git, you get the current git
commit (eg `Tor v0.2.7.0-alpha-dev (git-f70f1d283e4fb468)`).
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/14742#comment:10>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list