Search Mailing List Archives


Limit search to: Subject & Body Subject Author
Sort by: Reverse Sort
Limit to: All This Week Last Week This Month Last Month
Select Date Range     through    

[liberationtech] secure download tool - doesn't exist?!?

adrelanos adrelanos at riseup.net
Mon Jul 1 12:19:11 PDT 2013


Nathan of Guardian:
> On 07/01/2013 02:03 PM, adrelanos wrote:
>> I think, this kind of tool doesn't exist yet.
> 
> Could torrents and magnet links address this issue?

As far I know they include hash verification.

Issues:

- you still have to tell the user "you must download tool X before you
can download Y"
- torrents have a bad reputation for being illegal and to get trouble
with law enforcement, even if in this case it would be perfectly legal
in most jurisdictions
- browser integration?

In case of Whonix, who is going to seed it? Most people aren't eager to
acknowledge, that they are using it.

> Should we push all
> projects to promote torrents if they are unable to offer HTTPS?

Still... Would be useful for at least some projects. For example, if the
gpg website was TLS/HSTS and included a torrent link, which does
verification, this would be a big improvement already.

> <snip>
> I know there are privacy-decreasing aspects of Torrent use, but that
> wasn't part of your requirements(!) :)

It actually is.

I didn't say it explicitly, indeed. Only implicitly because all tools I
named as example where privacy tools. There are probable many other
points where my posting lacks or can be misunderstood.

> <snip>




More information about the liberationtech mailing list