[tor-bugs] #8525 [Tor bundles/installation]: ask build dependency maintainers to get HTTPS and GPG

[Tor Bug Tracker & Wiki]

#8525: ask build dependency maintainers to get HTTPS and GPG
--------------------------------------+-------------------------------------
 Reporter:  proper                    |          Owner:  erinn
     Type:  enhancement               |         Status:  new  
 Priority:  normal                    |      Milestone:       
Component:  Tor bundles/installation  |        Version:       
 Keywords:                            |         Parent:  #8288
   Points:                            |   Actualpoints:       
--------------------------------------+-------------------------------------
Changes (by mikeperry):

 * cc: ioerror (added)


Comment:

 Of the sources we depend upon, the worst offenders (no HTTPS *or* GPG) are
 libpng and zlib.

 Technically Qt is also in that list too, but we'll hopefully be rid of it
 soon.

 Several of the Windows build tools we use are also HTTP-only (and they are
 exe downloads).

 https-everywhere and noscript don't do GPG, but are at least served over
 HTTPS. Same goes for MozillaBuildSetup.exe.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/8525#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online