Package: apt-transport-tor
Version: 0.1.1-1
Severity: normal
X-Debbugs-Cc: sajol...@pimienta.org

Hi Tim,

first of all, thanks a lot for writing apt-transport-tor, and for
uploading it to Debian. I guess we'll want to use it in Tails, as one
of the steps needed to drop polipo entirely.

The package description reads:

 Install apt-transport-tor, edit your sources.list to include only tor://
 URLs, and you can "apt-get install anarchism" without fear of reprisals.

It's great to give examples that users can relate to, so that they can
understand what the benefits are. Good!

However, I find this phrasing a bit too optimistic, and prone to
convey a misplaced sense of security: there are a few tools in the
archive, most notably the popularity-contest, that leak the list of
installed packages in various ways. Therefore, pretending that one can
install whatever package they want, unconditionally, "without fear of
reprisals" seems a bit too self-confident to me.

What do you think?

Cheers,
--
  intrigeri
  | GnuPG key @ https://gaffer.ptitcanardnoir.org/intrigeri/intrigeri.asc
  | OTR fingerprint @ https://gaffer.ptitcanardnoir.org/intrigeri/otr.asc


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to