-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512

Testing: TorBrowser-4.5a3-osx64_en-US.dmg Platform: OS X 10.10.1 (14B25) Processor: 2.3GHz Intel Core i7 Memory: 16 GB 1600 MHz DDR3 Graphics: NVIDIA GeForce GT 750M 2048 MB Display: 15-inch (2880 x 1800 Retina)

TBB Launches successfully: yes Connects to the Tor network: yes Browser toolbars and menus work, tab dragging works: yes

All extensions are present and functional: yes - HTTPS-Everywhere 5.0development.2 - NoScript 2.6.9.10 - TorButton 1.8.1.3 - TorLauncher 0.2.7.1

WebBrowsing works as expected - HTTP, HTTPS, .onion browsing works (https://facebookcorewwwi.onion/) - HTML5 videos work on http://videojs.com/ and YouTube - http://ip-check.info/?lang=en - ok - https://panopticlick.eff.org/ - only one in 6,087 , 12.57 bits of identifying information

SOCKS/external apps work as expected: yes (Torbirdy)

SSL client is Improveable according to https://www.howsmyssl.com/. “Session tickets are not supported in your client. Without them, services will have a harder time making your client's connections fast. Generally, clients with ephemeral key support get this for free.”

New signing key imported and checks out (at least Erinn Clark signed it).

No noticeable misbehavior. Great!

Georg Koppen:

Hi,

Tor Browser 4.5a3 is up for testing. Bundles can be found on:

https://people.torproject.org/~gk/builds/4.5a3

This release is based on Firefox 31.4.0 ESR. As a major feature it contains the code that allows us to enhance the security of our updater even further: the next alpha release will be the first one that is shipping signed MAR files and the updater is already rejecting unsigned MAR files from now on.

Furthermore, this release includes a new Tor alpha version, 0.2.6.2-alpha, updates meek to 0.15 + makes it working again, and contains a bunch of additional improvements and bug fixes.

The full changelog for 4.5a3 is:

Tor Browser 4.5a3 -- Jan 16 2015 * All Platforms * Update Firefox to 31.4.0esr * Update Tor to 0.2.6.2-alpha * Update NoScript to 2.6.9.10 * Update HTTPS Everywhere to 5.0development.2 * Update meek to 0.15 * Update Torbutton to 1.8.1.3 * Bug 13998: Handle changes in NoScript 2.6.9.8+ * Bug 14100: Option to hide NetworkSettings menuitem * Bug 13079: Option to skip control port verification * Bug 13835: Option to change default Tor Browser homepage * Bug 11449: Fix new identity error if NoScript is not enabled * Bug 13881: Localize strings for tor circuit display * Bug 9387: Incorporate user feedback * Bug 13671: Fixup for circuit display if bridges are used * Translation updates * Update Tor Launcher to 0.2.7.1 * Translation updates * Bug 13379: Sign our MAR files * Bug 13788: Fix broken meek in 4.5-alpha series * Bug 13439: No canvas prompt for content callers

Note: from now on there is a new signing key we use for the alpha releases which will eventually replace the one currently used for the stable series as well (see: #13407 if you are interested in the gory details). You can find its details on our signing key website:

https://www.torproject.org/docs/signing-keys.html.en

Georg

_______________________________________________ tor-qa mailing list tor-qa@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-qa