Re: [tor-dev] Why not use The Update Framework? (TUF)

2013-08-06 Thread Nick Mathewson
On Mon, Aug 5, 2013 at 3:05 PM, adrelanos wrote: >> For TBB 3.0, we should use the Firefox updater. We should audit the > Firefox updater for issues, and triage which of Thandy's features we > should merge to it. (For example, we might want to sign the metadata > file if it isn't signed; timestamp

Re: [tor-dev] augmenting RSA identities/signatures with ECC and beyond

2013-08-06 Thread Nick Mathewson
On Sat, Aug 3, 2013 at 10:59 PM, Jacob Appelbaum wrote: > Nick Mathewson: >> On Sat, Aug 3, 2013 at 9:29 PM, Jacob Appelbaum wrote: >>> Hi, >>> >>> Linus and I had an interesting discussion at IETF 87 this past week in >>> Berlin. We're both concerned about long term Directory Authority >>> ident