Opened 5 years ago

Last modified 5 months ago

#13122 new enhancement

Please make .asc files be downloaded instead of displayed

Reported by: lunar Owned by:
Priority: Medium Milestone:
Component: Internal Services/Service - dist Version:
Severity: Normal Keywords:
Cc: Actual Points:
Parent ID: #30259 Points:
Reviewer: Sponsor:

Description

Currently when opening the following link in a browser, the signature will be displayed instead of downloaded: https://www.torproject.org/dist/torbrowser/3.6.5/torbrowser-install-3.6.5_en-US.exe.asc

This can confuse users trying to verify the signature, because they will need the file saved on their disk with most tools. In order to save them a step, and some bewilderment, let's make .asc files be downloaded by browsers.

I believe the Apache configuration snippet to be close to the following:

<FilesMatch "\.asc$">
  ForceType application/octet-stream
  Header set Content-Disposition attachment
</FilesMatch>

Child Tickets

Change History (3)

comment:1 Changed 5 years ago by cypherpunks

Correct approach as per rfc3156 is:

ForceType application/pgp-signature

comment:2 Changed 23 months ago by teor

Severity: Normal

Set all open tickets without a severity to "Normal"

comment:3 Changed 5 months ago by pili

Parent ID: #30259
Note: See TracTickets for help on using tickets.