[Pkg-anonymity-tools] torbrowser-launcher in Debian stable

u u at 451f.org
Wed Jan 21 18:27:54 UTC 2015


Hi,

intrigeri:
> u wrote (21 Jan 2015 14:34:59 GMT) :
>> If I understand your idea correctly, this might be the cleaner way to do
>> it. Would this only apply for the stable package then?
> 
> It could equally apply for all tbl packages.

ok.

>> However, there seems to be a 3rd parameter to be taken into account,
>> which is the way the Torporject itself handles their signing keys,
>> certificates, version numbers and URLs (this is not merely a list of
>> examples, but actual updates we've had in the past on this package).
> 
>> Until now, I always had the impression that this is not very clear and
>> there is no communication whatsoever (even if one reads tor-qa), so that
>> modifications on the Torproject side arrive quite late in tbl and arrive
>> even later on our plate.
> 
> Indeed.
> 
> I don't remember whether it's been communicated clearly to the Tor
> Browser developers and the tpo sysadmins what exactly they should
> communicate about. (Again, I may be forgetting a discussion that has
> already happened, sorry if that's the case.)

I had a brief discussion on #tor-dev about the changing signing keys
some months ago. The people who were present were not eager to go into
any detail, telling me that Micah would get the information soon enough
anyway :/

I did not follow-up on this elsewhere than IRC though.

> Note that most of the Tor Browser development discussions happen on
> Trac, rather than on mailing-lists. E.g. for some of the recent
> changes:
> 
>   https://trac.torproject.org/projects/tor/ticket/13960
>   https://trac.torproject.org/projects/tor/ticket/14213

Thanks. It seems very hard for me to keep track of that bug tracker. Too
much information.

>> So all this information and other stuff we did not anticipate yet would
>> need to go into that data package you are suggesting, correct?
> 
> Yes. Now, just like Holger, I'm not sure if it's worth the effort.

That.. makes me happy :)

So in conclusion, we leave things as they are?

Cheers!
u.



More information about the Pkg-anonymity-tools mailing list