[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #7948 [Website]: It is hard to download the vidalia-bundle on torproject.org using web proxies
#7948: It is hard to download the vidalia-bundle on torproject.org using web
proxies
-------------------------------------------+--------------------------------
Reporter: hans_meier | Owner:
Type: defect | Status: new
Priority: normal | Milestone:
Component: Website | Version:
Keywords: download, web proxy, webproxy | Parent:
Points: | Actualpoints:
-------------------------------------------+--------------------------------
Comment(by arma):
My first thought is "well don't do that then".
Using a web proxy puts all your encryption and authentication in the hands
of the web proxy. They can give you whatever file they like. And you can't
even use them to reach gmail (see
https://www.torproject.org/docs/faq#GetTor), since they can pretend to be
gmail, learn your gmail password, etc.
If you do stick to your "download a thing via a web proxy and then run it"
plan, you should learn about gpg signatures and how to check them.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/7948#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs