Re: [Tails-dev] [liberationtech] secure download tool - does…

Delete this message

Reply to this message
Author: adrelanos
Date:  
To: Nathan of Guardian
CC: The Tails public development discussion list, liberationtech
Subject: Re: [Tails-dev] [liberationtech] secure download tool - doesn't exist?!?
Nathan of Guardian:
> On 07/01/2013 02:03 PM, adrelanos wrote:
>> I think, this kind of tool doesn't exist yet.
>
> Could torrents and magnet links address this issue?


As far I know they include hash verification.

Issues:

- you still have to tell the user "you must download tool X before you
can download Y"
- torrents have a bad reputation for being illegal and to get trouble
with law enforcement, even if in this case it would be perfectly legal
in most jurisdictions
- browser integration?

In case of Whonix, who is going to seed it? Most people aren't eager to
acknowledge, that they are using it.

> Should we push all
> projects to promote torrents if they are unable to offer HTTPS?


Still... Would be useful for at least some projects. For example, if the
gpg website was TLS/HSTS and included a torrent link, which does
verification, this would be a big improvement already.

> <snip>
> I know there are privacy-decreasing aspects of Torrent use, but that
> wasn't part of your requirements(!) :)


It actually is.

I didn't say it explicitly, indeed. Only implicitly because all tools I
named as example where privacy tools. There are probable many other
points where my posting lacks or can be misunderstood.

> <snip>