Hi,
the Tor Browser dev team is preparing a 4.5.2 release to fix Logjam.
GeKo tells me that "the fix for ESR landed last week but mozilla does
not deem that important enough to make a chemspill" and "so we
basically cherry-picked the patches only".
Has anyone here a strong opinion wrt. putting out an emergency Tails
1.4.x release? What are you folks motivation and availability to make
it happen?
I've not looked enough into this topic to have a strong opinion yet,
but what's clear is that it would be disastrous for me personally to
throw another 20-hours-in-a-row work session into it.
Resources:
https://weakdh.org/
https://lwn.net/Articles/645189/
https://www.openssl.org/blog/blog/2015/05/20/logjam-freak-upcoming-changes/
Cheers,
--
intrigeri
