[tor-bugs] #22262 [Applications/Tor Browser Sandbox]: Tor Browser Sandbox should offer the possibility to download the Tor Browser from mirrors

[Tor Bug Tracker & Wiki]

#22262: Tor Browser Sandbox should offer the possibility to download the Tor
Browser from mirrors
----------------------------------------------+-------------------------
 Reporter:  blockflare                        |          Owner:  yawning
     Type:  enhancement                       |         Status:  new
 Priority:  Medium                            |      Milestone:
Component:  Applications/Tor Browser Sandbox  |        Version:
 Severity:  Normal                            |     Resolution:
 Keywords:                                    |  Actual Points:
Parent ID:                                    |         Points:
 Reviewer:                                    |        Sponsor:
----------------------------------------------+-------------------------

Comment (by yawning):

 This sort of thing is kind of covered/touched on by #20792.

 It will only happen if there is an easy way to query the URL(s) for the
 current bundle/signature that factors in mirrors, a la the
 `downloads.json` file that lives on `aus1.torproject.org`, that is
 sufficiently trusted.  Where the bundle/signature is downloaded from is
 basically irrelevant if adversaries can block `aus1.torproject.org`.

 It's not something I'm going to fight for or push for, so it's up to
 someone else to make the appropriate metadata happen, document it, keep
 the metadata up to date, and point me at the documentation (or provide a
 patch) if they want this functionality.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22262#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online