Opened 3 years ago

Closed 3 years ago

#22262 closed enhancement (duplicate)

Tor Browser Sandbox should offer the possibility to download the Tor Browser from mirrors

Reported by: blockflare Owned by: yawning
Priority: Low Milestone:
Component: Archived/Tor Browser Sandbox Version:
Severity: Normal Keywords:
Cc: ilv@… Actual Points:
Parent ID: #20792 Points:
Reviewer: Sponsor:

Description

If someone is in a censored area (and he doesn't know how to setup system tor with bridges) then it would be much better to offer him the possibility to download the Tor Browser from a mirror (in particular the github mirror)

Child Tickets

Change History (6)

comment:1 Changed 3 years ago by yawning

This sort of thing is kind of covered/touched on by #20792.

It will only happen if there is an easy way to query the URL(s) for the current bundle/signature that factors in mirrors, a la the downloads.json file that lives on aus1.torproject.org, that is sufficiently trusted. Where the bundle/signature is downloaded from is basically irrelevant if adversaries can block aus1.torproject.org.

It's not something I'm going to fight for or push for, so it's up to someone else to make the appropriate metadata happen, document it, keep the metadata up to date, and point me at the documentation (or provide a patch) if they want this functionality.

comment:2 Changed 3 years ago by yawning

Parent ID: #20792

comment:3 in reply to:  1 Changed 3 years ago by blockflare

Replying to yawning:

It will only happen if there is an easy way to query the URL(s) for the current bundle/signature that factors in mirrors, a la the downloads.json file that lives on aus1.torproject.org, that is sufficiently trusted. Where the bundle/signature is downloaded from is basically irrelevant if adversaries can block aus1.torproject.org.

I made a pull request containing a downloads.json in the official GetTorBrowser mirror on github https://github.com/TheTorProject/gettorbrowser/pull/13

comment:4 Changed 3 years ago by yawning

Priority: MediumLow

Lowering the priority on UI/UX related tasks. The entire UI code needs to be taken out back behind a shed and shot, and not incrementally added to.

comment:5 Changed 3 years ago by ilv

Cc: ilv@… added

comment:6 Changed 3 years ago by yawning

Resolution: duplicate
Status: newclosed

Dup of #20792.

Note: See TracTickets for help on using tickets.