torbrowser-launcher
torbrowser-launcher copied to clipboard
Add a "Report" button when detecting a possible MITM attack

When a signature verification fails, and maybe in other situations like when the certificate served by https://www.torproject.org/ isn't valid, it should offer a button to report this back to Tor. I'm open to suggestions on what this button will do.
If the Tor network is available, I'd suggest you post to https://trac.torproject.org/ and open a bug report as cypherpunks.
If the Tor network is not available, I'd suggest a user is prompted to manually report the bug and is presented with a text file containing the data.
Alternatively, we can try the bug reporting systems on Debian and Ubuntu.
I think the reporting functionality should not just appear for bad signature verification, but also for bad SSL certificate pinning (#1).