[Tails-dev] Logjam: Tor Browser 4.5.2, and... Tails 1.4.x?

Supprimer ce message

Répondre à ce message
Auteur: intrigeri
Date:  
À: tails-dev
Sujet: [Tails-dev] Logjam: Tor Browser 4.5.2, and... Tails 1.4.x?
Hi,

the Tor Browser dev team is preparing a 4.5.2 release to fix Logjam.
GeKo tells me that "the fix for ESR landed last week but mozilla does
not deem that important enough to make a chemspill" and "so we
basically cherry-picked the patches only".

Has anyone here a strong opinion wrt. putting out an emergency Tails
1.4.x release? What are you folks motivation and availability to make
it happen?

I've not looked enough into this topic to have a strong opinion yet,
but what's clear is that it would be disastrous for me personally to
throw another 20-hours-in-a-row work session into it.

Resources:

https://weakdh.org/
https://lwn.net/Articles/645189/
https://www.openssl.org/blog/blog/2015/05/20/logjam-freak-upcoming-changes/

Cheers,
--
intrigeri