[tor-bugs] #22262 [Applications/Tor Browser Sandbox]: Tor Browser Sandbox should offer the possibility to download the Tor Browser from mirrors

[Tor Bug Tracker & Wiki]

#22262: Tor Browser Sandbox should offer the possibility to download the Tor
Browser from mirrors
----------------------------------------------+-------------------------
 Reporter:  blockflare                        |          Owner:  yawning
     Type:  enhancement                       |         Status:  new
 Priority:  Medium                            |      Milestone:
Component:  Applications/Tor Browser Sandbox  |        Version:
 Severity:  Normal                            |     Resolution:
 Keywords:                                    |  Actual Points:
Parent ID:  #20792                            |         Points:
 Reviewer:                                    |        Sponsor:
----------------------------------------------+-------------------------

Comment (by blockflare):

 Replying to [comment:1 yawning]:
 > It will only happen if there is an easy way to query the URL(s) for the
 current bundle/signature that factors in mirrors, a la the
 `downloads.json` file that lives on `aus1.torproject.org`, that is
 sufficiently trusted.  Where the bundle/signature is downloaded from is
 basically irrelevant if adversaries can block `aus1.torproject.org`.

 I made a pull request containing a `downloads.json` in the official
 GetTorBrowser mirror on github
 https://github.com/TheTorProject/gettorbrowser/pull/13

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22262#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online