3 ms·
They just need to merge the Tor Browser into Firefox and add a meek-like http-based pluggable transport, then they can get around these weird MITM boxes. They
by chei0aiV 11y ago
They just need to merge the Tor Browser into Firefox and add a meek-like http-based pluggable transport, then they can get around these weird MITM boxes.
They probably should have foreseen this and used OpenPGP-based updates over plain HTTP though.
- jvehent 11y agoThe updates themselves are served over HTTP and signed, but the request that verifies an update is available is done over HTTPS.