Opened 5 years ago

Closed 4 years ago

#14625 closed defect (fixed)

set expiration date for Tor Browser Developers signing key

Reported by: proper Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: MikePerry201509R
Cc: u@…, proper Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

I've noticed, that Tor Browser Developers signing key currently has no expiration date set.

gpg --fingerprint EF6E286DDA85EA2A4BA7DE684E2C6E8793298290
pub   4096R/93298290 2014-12-15
      Key fingerprint = EF6E 286D DA85 EA2A 4BA7  DE68 4E2C 6E87 9329 8290
uid       [ unknown] Tor Browser Developers (signing key) <torbrowser@torproject.org>
sub   4096R/F65C2036 2014-12-15
sub   4096R/D40814E0 2014-12-15
sub   4096R/589839A3 2014-12-15

I think it's recommended best practices to have one set.

Related to:
#13407

Child Tickets

Attachments (1)

0001-Bug-14625-Set-expiration-dates-for-TBB-keys.patch (2.1 KB) - added by gk 4 years ago.

Download all attachments as: .zip

Change History (6)

comment:1 Changed 5 years ago by gk

Parent ID: #13407

comment:2 Changed 4 years ago by gk

Keywords: MikePerry201508R added
Status: newneeds_revision

This is done and I updated the KeyGeneration document.

comment:3 Changed 4 years ago by gk

Status: needs_revisionneeds_review

comment:4 Changed 4 years ago by gk

Keywords: MikePerry201509R added; MikePerry201508R removed

comment:5 Changed 4 years ago by gk

Resolution: fixed
Severity: Normal
Status: needs_reviewclosed

This fell through the cracks. But commit b03656fbbfdb56bae9778c5cea14a13ea92f2b11 has it now.

Note: See TracTickets for help on using tickets.