Re: torified netinst.iso and live.iso
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Steve McIntyre:
> This sounds like a very good idea, thanks! As far as I can see,
> we'd need to:
>
> 1. add the extra packages (tor, apt-transport-tor, anything else?)
>
> very easy - I can add those to the package lists for d-i and/or
> debian-cd very easily
>
> 2. change the sources.list to use those and the onion addresses
>
> slightly more involved - we'd need to tweak things, maybe give
> users the choice during installation
>
> 3. if the user chose to use tor at install time, change d-i itself
> to use tor for even the initial installation packages
>
> much more complex - we'd need tor support built into d-i too, I
> guess
>
> If we'd want #3 too, that will need development work in d-i from
> somebody who knows tor?
>
this is it, in a nutshell. goal would be to do the initial
base/package installs over tor at install time. that way, if someone
downloaded the netinst.iso with torbrowser, all of the debian install
process would later be torified as well, effectively blocking various
levels of eyes from seeing that debian was ever used.
thank you for the reply.
- --
gpg key - 0x2A49578A7291BB34
fingerprint - 63C4 E106 AC6A 5F2F DDB2 3840 2A49 578A 7291 BB34
-----BEGIN PGP SIGNATURE-----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=F6e7
-----END PGP SIGNATURE-----
Reply to: