Circumvention Settings: Bridge list lacks signature
The bridge list provided by Circumvention Settings doesn't contain any signature and could be modified by an attacker with the ability to produce a valid cert for bridges.torproject.org and MitM the connection.
We could add a signature to the response that TB or others check.