[tor-bugs] #27514 [Community/Tor Support]: Add instructions how to verify signatures on Android

[Tor Bug Tracker & Wiki]

#27514: Add instructions how to verify signatures on Android
-----------------------------------+--------------------------------
 Reporter:  traumschule            |          Owner:  (none)
     Type:  task                   |         Status:  needs_revision
 Priority:  Medium                 |      Milestone:
Component:  Community/Tor Support  |        Version:
 Severity:  Normal                 |     Resolution:
 Keywords:                         |  Actual Points:
Parent ID:  #9843                  |         Points:
 Reviewer:                         |        Sponsor:
-----------------------------------+--------------------------------
Changes (by traumschule):

 * status:  needs_review => needs_revision
 * component:  Webpages/Website => Community/Tor Support
 * parent:  #3893 => #9843


Comment:

 #27682 is a duplicate. Quoting [comment:1:issue:27682 towiw3]:
 > This can potentially be used to identify Tor Browser for Android users.
 gnupg is not installed by default in Termux so it needs to be downloaded
 from Termux repository. Termux uses Cloudflare, too. It is better to use
 Orbot for downloading gnupg. Orbot VPN can be used to proxy Termux traffic
 through Tor. Orbot VPN must be used before opening Termux after installing
 it (of course this doesn't apply when Termux is already in use for a long
 time). This is not a problem when TBA is installed from Google play store;
 you are already identified as a TBA user and you don't verify signature if
 you installed TBA from Google play store.
 >
 > In Termux, `wget` doesn't support https links, it only supports http.
 But curl works so we can use it for downloading the .asc file. I think it
 would be helpful to include how to download the .asc file in the steps.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27514#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online