Opened 8 months ago

Last modified 7 months ago

#32781 new defect

Investigate alternative method to share bridges and Tor Browser bundles based on social network protocols

Reported by: hiro Owned by:
Priority: Medium Milestone:
Component: Circumvention Version:
Severity: Normal Keywords:
Cc: cohosh, phw Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description (last modified by hiro)

Tor is currently using bridgedb to distribute bridges to censored users.
Bridgedb uses email distribution which is not very effective when facing a high efficient censor like the GFW.

Some papers [1] have suggested methods based on social networks. These work under the assumption that we can only limit the censor ability to block servers.

Similarly gettor is using various storage service to provide alternative links to download tor browser bundle when torproject.org website is blocked.

I suggest decentralization protocols like retroshare [2] could be an alternative solution to share bridges and tor browser bundles to trusted parties. Furthermore retroshare supports already a variety of services [3] that could be used to communicate with users that need help circumventing censorship.

[1] https://www.degruyter.com/downloadpdf/j/popets.2016.2016.issue-4/popets-2016-0026/popets-2016-0026.pdf
[2] https://retroshare.cc/
[3] https://retroshare.readthedocs.io/en/latest/#features

Child Tickets

Change History (5)

comment:1 in reply to:  description Changed 8 months ago by phw

Summary: Investigate alternative method to share bridges and Tor Browser budnles based on social network protocolsInvestigate alternative method to share bridges and Tor Browser bundles based on social network protocols

Replying to hiro:

Tor is currently using bridgedb to distribute bridges to censored users.
Bridgedb uses email distribution mainly which is not very effective when facing a high efficient censor like the GFW.


For what it's worth, email is our least popular distribution method. The most popular one is moat, followed by HTTPS, followed by email. See #32135 for diagrams.

comment:2 Changed 8 months ago by hiro

I understand the use of the word mainly referred to bridgedb implies I considered it the first distribution method. Let me delete that. I was probably thinking to gettor when I wrote that sentence.

comment:3 Changed 8 months ago by hiro

Description: modified (diff)

comment:4 Changed 7 months ago by sigvids

As mentioned in a comment on #31873, "Shadowsocks(R) and V2Ray proxy servers are openly distributed in Telegram groups."

comment:5 Changed 7 months ago by sigvids

I have created a proof of concept for Telegram messenger distribution of bridges at https://github.com/sigvids/proxybot

Note: See TracTickets for help on using tickets.