[tor-bugs] #7948 [Website]: It is hard to download the vidalia-bundle on torproject.org using web proxies

Tor Bug Tracker & Wiki blackhole at torproject.org
Mon Jan 14 16:39:13 UTC 2013


#7948: It is hard to download the vidalia-bundle on torproject.org using web
proxies
-------------------------------------------+--------------------------------
 Reporter:  hans_meier                     |          Owner:     
     Type:  defect                         |         Status:  new
 Priority:  normal                         |      Milestone:     
Component:  Website                        |        Version:     
 Keywords:  download, web proxy, webproxy  |         Parent:     
   Points:                                 |   Actualpoints:     
-------------------------------------------+--------------------------------

Comment(by arma):

 My first thought is "well don't do that then".

 Using a web proxy puts all your encryption and authentication in the hands
 of the web proxy. They can give you whatever file they like. And you can't
 even use them to reach gmail (see
 https://www.torproject.org/docs/faq#GetTor), since they can pretend to be
 gmail, learn your gmail password, etc.

 If you do stick to your "download a thing via a web proxy and then run it"
 plan, you should learn about gpg signatures and how to check them.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/7948#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list