[tor-talk] [GetTor] Simple way of getting Tor countering TorProject.org and its mirrors censorship using the Internet Archive's Wayback Machine
Jonathan Marquardt
mail at parckwart.de
Thu Jan 5 08:29:09 UTC 2017
The problem with this of course is that you need to trust a third party: The
Internet Archive. Unless you have some checksums of binaries or - much better
of course - the Tor developer's PGP keys. If you have some way of verifying
what you download, this circumvention method might be a good idea. But if not,
it's a little bit risky. Especially since the Internet Archive's webserver
does not enforce HTTPS. That's one more way to screw up and get
man-in-the-middle attacked.
More information about the tor-talk
mailing list