Opened 15 months ago

Last modified 5 months ago

#26553 new defect

Sign our own extensions in Tor Browser

Reported by: gk Owned by: tbb-team
Priority: High Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: ff60-esr, tbb-security, AffectsTails, TorBrowserTeam201904, GeorgKoppen201904
Cc: intrigeri, dmr, ckb@…, hefee Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

We should seriously look into signing our own extensions for Tor Browser 8. This includes the language packs we modify as well now (see: #26465).

Child Tickets

TicketStatusOwnerSummaryComponent
#22971newtbb-teamThe XPI signing mechanism needs to use different hash functions.Applications/Tor Browser

Change History (27)

comment:1 Changed 15 months ago by gk

Keywords: ff60-esr added

comment:2 Changed 15 months ago by intrigeri

Cc: intrigeri added

comment:3 Changed 15 months ago by gk

Keywords: TorBrowserTeam201807 added; TorBrowserTeam201806 removed

Moving first batch of tickets to July 2018

comment:4 Changed 15 months ago by gk

Keywords: GeorgKoppen201807 added; GeorgKoppen201806 removed

Moving my tickets.

comment:5 Changed 14 months ago by gk

Keywords: GeorgKoppen201808 added; GeorgKoppen201807 removed

Moving my tickets.

comment:6 Changed 14 months ago by gk

Keywords: TorBrowserTeam201808 added; TorBrowserTeam201807 removed

Move our tickets to August.

comment:7 Changed 14 months ago by intrigeri

We at Tails currently patch the add-on signature checking code (on top of your current patch that adds a whitelist with if (aAddon.id == […] aka. 0714762d25415271191503903a9f2fb0627ca38d on the tor-browser-60.1.0esr-8.0-1 branch) to add uBlock to the list. We've discussed this on the https://lists.torproject.org/pipermail/tbb-dev/2017-April/000515.html thread, where it seems that we (TBB team + Tails) reached a tentative agreement to move the whitelist to a pref. But so far we failed to write the corresponding code, sorry! FTR on Tails' side this is tracked on https://labs.riseup.net/code/issues/12571.

It would be extremely helpful if the resolution for this ticket made things better for us (e.g. keep that patch and create a pref with the list of allowed unsigned add-ons, empty by default for TBB, where we would add uBlock) instead of worse. Things would get worse for us if the code that adds a whitelist with if (aAddon.id == […] was fully removed: then we would need to carry it as part of Tails delta, which is quite ugly and painful.

comment:8 Changed 13 months ago by dmr

Cc: dmr added

comment:9 Changed 13 months ago by gk

Keywords: GeorgKoppen201809 added; GeorgKoppen201808 removed

Moving my tickets to September.

comment:10 Changed 13 months ago by gk

Keywords: TorBrowserTeam201809 added; TorBrowserTeam201808 removed

Moving our tickets to September 2018

comment:11 Changed 12 months ago by gk

Keywords: TorBrowserTeam201810 added; TorBrowserTeam201809 removed

Moving tickets to October

comment:12 Changed 12 months ago by gk

Keywords: GeorgKoppen201810 added; GeorgKoppen201809 removed

Moving my tickets to October.

comment:13 Changed 11 months ago by gk

Keywords: TorBrowserTeam201811 added; TorBrowserTeam201810 removed

Moving our tickets to November.

comment:14 Changed 11 months ago by gk

Keywords: GeorgKoppen201811 added; GeorgKoppen201810 removed

comment:15 Changed 10 months ago by gk

Keywords: GeorgKoppen201812 added; GeorgKoppen201811 removed

Moving my tickets to December.

comment:16 Changed 10 months ago by gk

Keywords: TorBrowserTeam201812 added; TorBrowserTeam201811 removed

Moving our tickets to December.

comment:17 Changed 8 months ago by gk

Keywords: GeorgKoppen201901 added; GeorgKoppen201812 removed

Moving my tickets.

comment:18 Changed 8 months ago by gk

Keywords: TorBrowserTeam201901 added; TorBrowserTeam201812 removed

Moving tickets to Jan 2019.

comment:19 Changed 8 months ago by gk

Keywords: GeorgKoppen201902 added; GeorgKoppen201901 removed

Moving my tickets to Feb

comment:20 Changed 7 months ago by gk

Keywords: TorBrowserTeam201902 added; TorBrowserTeam201901 removed

Moving tickets to February.

comment:21 Changed 7 months ago by CyrilBrulebois

Cc: ckb@… added

comment:22 Changed 7 months ago by intrigeri

Keywords: AffectsTails added

comment:23 Changed 7 months ago by hefee

Cc: hefee added

comment:24 Changed 6 months ago by gk

Keywords: TorBrowserTeam201903 added; TorBrowserTeam201902 removed

Moving my tickets to March.

comment:25 Changed 6 months ago by gk

Keywords: GeorgKoppen201903 added; GeorgKoppen201902 removed

Now for my keyword.

comment:26 Changed 6 months ago by gk

Keywords: TorBrowserTeam201904 added; TorBrowserTeam201903 removed

Moving tickets to April.

comment:27 Changed 5 months ago by gk

Keywords: GeorgKoppen201904 added; GeorgKoppen201903 removed

Moving my tickets for April

Note: See TracTickets for help on using tickets.