Open ghost opened 10 years ago
If apt-transport-tor is stable, we could already add the tool without configuring it for any repository, which I think has broad consensus. Then we can decide whether to configure some repositories to be accessed from tor.
I agree that the deb.freepto.mx repository be accessed by tor: there are no huge packages, so the bandwidth problem is smaller, and we would benefit for less fingerprinting of freepto users (which are much less than debian users!)
I just realized that apt-transport-tor is not available neither from wheezy repository nor wheezy-backports. ¹
Also it depends to a new version of libc6 (>= 2.14), therefore a back-porting is hard and not recommended.
We could leave it pending for the 5 years waiting the next debian stable release ;)
¹ https://packages.debian.org/search?suite=jessie&arch=any&searchon=names&keywords=apt-transport-tor
I'll close it as wontfix
, as it would be very difficult to fix, and is not part of our security model
reopening, since we will move to jessie someday ;)
We should consider to use apt-transport-tor as a default transport system, in order to improve the freepto user anonymity.
If this proposal will accepted, we should modify our /etc/apt/sources.list like so:
and install the following package:
for more info about apt-transport-tor please refer to: https://github.com/diocles/apt-transport-tor