Use digital signature verification to prevent modification of omni.ja
Since omni.ja is an ordinary zip archive, anyone can easily inject a backdoor into it and redistribute modified version of Tor Browser. So, it's need to use digital signature to prevent modification of both omni.ja files.
Trac:
Username: indigotime