Author: adrelanos Date: To: Nathan of Guardian CC: The Tails public development discussion list, liberationtech Subject: Re: [Tails-dev] [liberationtech] secure download tool - doesn't
exist?!?
Nathan of Guardian: > On 07/01/2013 02:03 PM, adrelanos wrote:
>> I think, this kind of tool doesn't exist yet.
>
> Could torrents and magnet links address this issue?
As far I know they include hash verification.
Issues:
- you still have to tell the user "you must download tool X before you
can download Y"
- torrents have a bad reputation for being illegal and to get trouble
with law enforcement, even if in this case it would be perfectly legal
in most jurisdictions
- browser integration?
In case of Whonix, who is going to seed it? Most people aren't eager to
acknowledge, that they are using it.
> Should we push all
> projects to promote torrents if they are unable to offer HTTPS?
Still... Would be useful for at least some projects. For example, if the
gpg website was TLS/HSTS and included a torrent link, which does
verification, this would be a big improvement already.
> <snip>
> I know there are privacy-decreasing aspects of Torrent use, but that
> wasn't part of your requirements(!) :)
It actually is.
I didn't say it explicitly, indeed. Only implicitly because all tools I
named as example where privacy tools. There are probable many other
points where my posting lacks or can be misunderstood.
> <snip>
