[Freedombox-discuss] Identity UI
----- Original Message -----
> From: Daniel Kahn Gillmor <dkg at fifthhorseman.net>
> To: freedombox list <freedombox-discuss at lists.alioth.debian.org>
> Sent: Monday, June 25, 2012 1:59 AM
> Subject: Re: [Freedombox-discuss] Identity UI
> On 06/25/2012 12:14 AM, Jonathan Wilkes wrote:
>> You say at the top that you're not convinced that Tor is a requirement
>> the Freedombox, yet Tor solves all the problems addressed below that.
>> Anyway, how do you solve the "magic routing problem" without it?
> I'm not saying Freedombox should avoid Tor.? I agree, it seems like a
> good fit.
> But I'm not knowledgeable enough about all other possible cryptographic
> mix networks or alternate routing proposals to rule all of them out and
> state that Tor is unequivocally a requirement for anyone wanting to
> implement the freedombox vision.
I'd agree with that.? If there are other solutions out there
that are user-friendly, well-documented, well-supported,
well-developed, and widely-used that can be up and running
behind a NAT with one-click, then those would be good possibilities,
> And even if i wanted to do that, i haven't contributed enough (anything,
> really) to the concrete work of the project to presume to tell the
> people actually doing the work what is or isn't a requirement.
The people doing the work are already using it:
> Note also that Tor brings with it its own bit of centralized control, in
> the form of the 8 directory authorities  (4 need to be compromised
> for an adversary to gain control over your tor connection), but i think
> that's an improvement over the status quo, at least.
I didn't know about that.? Since early Freedombox adoption will contain
a lot of devs, I wonder if they could add either more
directory authorities or at least some redundancy for the ones already
existing.? Since Tor and FB goals have so much overlap it seems like
it should be possible to create the trust necessary to do that.? Then
again, I'm not sure why there are 8 in the first place-- maybe its better
for them to limit the necessary trust for such an integral part of the
network.? In any case, I'll do some learning...
> ??? --dkg
>  https://www.torproject.org/docs/faq.html.en#KeyManagement
> Freedombox-discuss mailing list
> Freedombox-discuss at lists.alioth.debian.org