Opened 5 years ago

Closed 2 years ago

#15199 closed enhancement (wontfix)

Build, Release, Distribute a Tor2web enabled version of Tor

Reported by: naif Owned by:
Priority: Medium Milestone: Tor: unspecified
Component: Core Tor/Tor Version:
Severity: Normal Keywords:
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

This ticket is to propose Tor Project to Build, Release, Distribute a Tor2web enabled version of Tor with the goal to make Tor2web setup process easier.

Today to setup a Tor2web system, an end-user must build a custom Tor version https://github.com/globaleaks/Tor2web/wiki/Installation-Guide with a quite complex process.

If Tor would automatically build, release and distribute stable and experimental version of Tor with Tor2web enabled, it would become extremely easier to setup a Tor2web node.

Because Tor2web maybe dangerous for general use by end-user, as it's jeopardizing anonymity when connecting to Tor Hidden Service, it shall not be available as a general purpose download option on the Tor option page.

The Tor's binary with Tor2web enabled, shall be available only for Linux Debian and Ubuntu targets.

We may just create a wiki page on Trac that provide guidance for the build, release and distribution of Tor2web enabled version of Tor, as a way to enable only technical people understanding the context/scope of use how to use it.

The Hermes Center's team is available to support this process by volounteering to have it in-place and is kindly willing to support the Tor's developer time with tasty Italian Red Wine.

Child Tickets

Change History (3)

comment:1 Changed 5 years ago by nickm

Milestone: Tor: unspecified

comment:2 Changed 5 years ago by naif

The risk that could be considered is that end-user will download a "Faster version of Tor" that's the one designated for Tor2web use.

To protect against this risk we can limit such release, in order to focus only on NON-end-user.

End-user Tor = TorBrowser (of which is probably =>90% is Windows/OSX) .

A Linux Tor binary, that let you only connect to TorHS, it's not something that end-user would be able to download and use:

  • Because is not for Desktop computer (Windows/OSX)
  • Because allow to connect only to TorHS

So, those set of release/packaging feature would protect end-user from misuse, making this Tor release suitable only for Tor2web use (or for experimenting).

comment:3 Changed 2 years ago by nickm

Resolution: wontfix
Severity: Normal
Status: newclosed
Note: See TracTickets for help on using tickets.