Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

After grace period, deactivate old endpoint and update main branch/deploy logic #64

Closed
3 tasks done
eloquence opened this issue Jul 6, 2021 · 4 comments
Closed
3 tasks done

Comments

@eloquence
Copy link
Member

eloquence commented Jul 6, 2021

Tor Browser 10.5 was released today (https://blog.torproject.org/new-release-tor-browser-105). It ships the new 2021 endpoint https://securedrop.org/https-everywhere-2021/ as the default prefix for the HTTPSEverywhere ruleset.

After a suitable grace period, we should:

The Tails 4.20 release (2021-07-13) seems like the earliest opportunity for making these changes, provided that it ships with Tor Browser 10.5. Note that this will likely still introduce a limited amount of breakage for users who have not updated their Tails release yet, but auto-updates should cover most users.

@eloquence
Copy link
Member Author

We are aiming to retire the old endpoint approximately one week after the release of Tails 4.20, assuming it does indeed ship with Tor Browser 10.5.

@eloquence eloquence removed the blocked label Jul 21, 2021
@eloquence
Copy link
Member Author

eloquence commented Jul 21, 2021

Just to confirm, Tails 4.20 does indeed ship with Tor Browser 10.5.2, and the new ruleset endpoint.

@eloquence
Copy link
Member Author

This is mostly done, as far as I can tell the last remaining step is to schedule a time for a careful merge of #66, which will switch main to the branch signed with the new key, and should trigger a deploy (we need to be able to quickly revert in case of any issues).

@eloquence
Copy link
Member Author

This was resolved via #66

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant