proper

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

################
# About Whonix #
################

Whonix (called TorBOX or aos in past) is an anonymous general purpose
operating system based on Virtual Box, Debian GNU/Linux and Tor.
By Whonix design, IP and DNS leaks are impossible. Not even malware
with root rights can find out the user's real IP/location.

This is because Whonix consists of two (virtual) machines. One machine
solely runs Tor and acts as a gateway, which we call Whonix-Gateway.
The other machine, which we call Whonix-Workstation, is on a completely
isolated network. Only connections through Tor are possible.

Due to trademark issues the project was renamed to Whonix.

The project homepage with a full project description, threat model and
documentation, build instructions can be found here:
http://whonix.sf.net

################
# git branches #
################

In the master branch is almost nothing beside some general information
about Whonix, adrelanos and adrelanos's gpg public key.

Most new changes currently go into the untested_adre branch.

Detailed information about the Whonix git branches can be found here:
https://sourceforge.net/p/whonix/wiki/Dev_git/

################
# Legal        #
################

Whonix is produced independently from the Tor (r) anonymity software and
carries no guarantee from The Tor Project about quality, suitability
or anything else.

####################
# License          #
####################

See LICENSE in root of Whonix source for copyright, license and authors.

#####################
# How to contact me #
#####################

This is my personal user site. It acts as a brief introduction into Whonix
and explains, how to contact me and what the caveats are.

########################
# Mirrors of this site #
########################

Sourceforge:
* http://whonix.sf.net/adrelanos
* Not even SSL.

Github:
* https://github.com/adrelanos/whonix
* Github.com is accessible over SSL, see SSL security below.

Torproject.org Wiki:
* https://trac.torproject.org/projects/tor/wiki/doc/proper
* Anyone can edit the torproject.org wiki and exchange content with malicious
  one. Therefore check the history feature. Obviously I do trust Tor and
  torproject.org. My wiki account "proper" should be genuine.

Free Onion Hosting Service
* http://su6ephfi7dtxnbtb.onion/
* Anonymous admin.

torhost.onion Free Onion Hosting Service
* http://p4vm6o4n4hbfqxhy.onion/
* Anonymous admin.

################################
# Mirrors of adrelanos GPG key #
################################

savannah.gnu.org profile page
* https://savannah.gnu.org/people/viewgpg.php?user_id=89289
* The following command is recommend to enforce downloading the key over SSL.
* ## Not forced through Tor, unless you are using Whonix, torsocks or similar.
* curl --tlsv1 --proto =https https://savannah.gnu.org/people/viewgpg.php?user_id=89289 > adrelanos.asc.4

gpg keyserver
* No SSL.
* Should really be only used as a mirror.
* ## Not forced through Tor, unless you are using Whonix, torsocks or similar.
* gpg --keyserver x-hkp://pool.sks-keyservers.net --recv-keys 9B157153925C303A42253AFB9C131AD3713AAEEF

################
# SSL security #
################

Note, that the SSL public certificate authority system is not to be trusted,
since the recent major security breaks. (Comodo, DigiNotar)

########################
# Contact me by e-mail #
########################

I do not trust any e-mail providers. They can shut down or impersonate my
account at any time. If that concerns you, read GPG security below.

adrelanos at riseup period net

################
# GPG security #
################

GPG is, as it is, secure. The tricky thing is the web of trust model and
being sure, you got the right GPG key.

My GPG public key is not stored on any keyservers, because as an anonymous
developer, I can't get my key signed. The key can be found here and within
the file adrelanos.asc on github. Check the fingerprint of the key.

All mirrors of my personal site, do also have the power to exchange my GPG
key with a malicious one. It's unlikely, that all mirrors will cooperate
and tamper with my GPG key.

As soon as our new website is ready, my GPG key and
GPG fingerprint will be mirrored on at least on three different sites
(torproject wiki, github).

After all, the GPG key also only proves, that a message was singed with a
specific key id. It doesn't prove, if I am a genuine or evil developer or
even a whole entity.

See also:
https://sourceforge.net/p/whonix/wiki/TrustingWhonixSigningKey/

###################
# GPG fingerprint #
###################

gpg --fingerprint 9B157153925C303A42253AFB9C131AD3713AAEEF

pub   4096R/713AAEEF 2012-03-02
      Key fingerprint = 9B15 7153 925C 303A 4225  3AFB 9C13 1AD3 713A AEEF
uid                  proper (e-mail removed)
sub   4096R/794279C4 2012-03-02

##################
# GPG public key #
##################

Due to sigining this message "-----" got convertend to "- -----". If you
want to copy the public key below, please remove the "- " beforehand.

- -----BEGIN PGP PUBLIC KEY BLOCK-----
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=l8ma
- -----END PGP PUBLIC KEY BLOCK-----

#######
# End #
#######
-----BEGIN PGP SIGNATURE-----
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=8896
-----END PGP SIGNATURE-----