Mirimir: > When automatically updating, does Tor browser check GPG signatures of > downloaded updates before installing them?
The update files are not using GPG signatures (see: https://wiki.mozilla.org/Software_Update:MAR for detailed information about the MAR file format). They are signed, though, and the updater refuses to install the update if the signature is non-existing or wrong. Georg
signature.asc
Description: OpenPGP digital signature
-- tor-talk mailing list - tor-talk@lists.torproject.org To unsubscribe or change other settings go to https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
