Search Mailing List Archives
[liberationtech] secure download tool - doesn't exist?!?
adrelanos at riseup.net
Mon Jul 1 12:19:11 PDT 2013
Nathan of Guardian:
> On 07/01/2013 02:03 PM, adrelanos wrote:
>> I think, this kind of tool doesn't exist yet.
> Could torrents and magnet links address this issue?
As far I know they include hash verification.
- you still have to tell the user "you must download tool X before you
can download Y"
- torrents have a bad reputation for being illegal and to get trouble
with law enforcement, even if in this case it would be perfectly legal
in most jurisdictions
- browser integration?
In case of Whonix, who is going to seed it? Most people aren't eager to
acknowledge, that they are using it.
> Should we push all
> projects to promote torrents if they are unable to offer HTTPS?
Still... Would be useful for at least some projects. For example, if the
gpg website was TLS/HSTS and included a torrent link, which does
verification, this would be a big improvement already.
> I know there are privacy-decreasing aspects of Torrent use, but that
> wasn't part of your requirements(!) :)
It actually is.
I didn't say it explicitly, indeed. Only implicitly because all tools I
named as example where privacy tools. There are probable many other
points where my posting lacks or can be misunderstood.
More information about the liberationtech