Opened 2 weeks ago

Last modified 2 weeks ago

#29408 assigned task

Can we move TB downloads to CDN?

Reported by: ln5 Owned by: ln5
Priority: Medium Milestone:
Component: Internal Services/Tor Sysadmin Team Version:
Severity: Normal Keywords:
Cc: gk Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

Talk to TB team about the possibilities of moving TB downloads to fast.ly. TB upgrades are there already.

cf https://trac.torproject.org/projects/tor/wiki/org/meetings/2019BrusselsAdminTeamMinutes#CDNusevs.ownstaticrotationnetwork

Child Tickets

Change History (1)

comment:1 Changed 2 weeks ago by gk

Cc: gk added

I don't know Fastly but what made me reluctant so far is that the risk of getting malware delivered in "official" Tor Browser binaries seems slightly higher if we are out of control here, given that we don't have content signing available for all platforms and who is checking signatures anyway. While this risk might seem not pretty strong, given that chances are not so bad that this will get detected, the potential damage in trust for us is pretty high, even if it turns out that was due to Fastly getting some NSLs and not "done" by us.

Note: See TracTickets for help on using tickets.