Re: [Tails-dev] tails torrent tracker is http

Delete this message

Reply to this message
Author: intrigeri
Date:  
To: The Tails public development discussion list
Subject: Re: [Tails-dev] tails torrent tracker is http
Hi,

Sina S wrote (10 May 2014 16:15:17 GMT) :
> I just noticed the tails torrent tracker is using http.


Nice catch. Care to try if the same tracker is listening HTTPS, and
perhaps ask root@??? if unsure?

> Doesn't this leave users of the tracker vulnerable to man in the
> middle attacks?


Yes, probably.

Cheers,
--
intrigeri
| GnuPG key @ https://gaffer.ptitcanardnoir.org/intrigeri/intrigeri.asc
| OTR fingerprint @ https://gaffer.ptitcanardnoir.org/intrigeri/otr.asc