[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #7948 [Website]: It is hard to download the vidalia-bundle on torproject.org using web proxies

#7948: It is hard to download the vidalia-bundle on torproject.org using web
proxies
-------------------------------------------+--------------------------------
 Reporter:  hans_meier                     |          Owner:     
     Type:  defect                         |         Status:  new
 Priority:  normal                         |      Milestone:     
Component:  Website                        |        Version:     
 Keywords:  download, web proxy, webproxy  |         Parent:     
   Points:                                 |   Actualpoints:     
-------------------------------------------+--------------------------------

Comment(by arma):

 My first thought is "well don't do that then".

 Using a web proxy puts all your encryption and authentication in the hands
 of the web proxy. They can give you whatever file they like. And you can't
 even use them to reach gmail (see
 https://www.torproject.org/docs/faq#GetTor), since they can pretend to be
 gmail, learn your gmail password, etc.

 If you do stick to your "download a thing via a web proxy and then run it"
 plan, you should learn about gpg signatures and how to check them.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/7948#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs