Your message dated Mon, 28 Aug 2017 17:38:39 +0000
with message-id <[email protected]>
and subject line Re: Bug#872456: tor: Feature Request: please consider ship 
default Tor bridges
has caused the Debian Bug report #872456,
regarding tor: Feature Request: please consider ship default Tor bridges
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
872456: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=872456
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: tor
Version: 0.3.2.0-alpha-dev-20170814T130811Z-1~d90.stretch+1
Severity: wishlist

Dear Maintainer,

A set of Tor bridges are shipped with Tor browser bundle[0], helping
users in Tor-censored area to connection to the Tor network. Since
Debian system Tor users may also face the censorship problem, shall we
ship some Tor bridges along with the tor package?

Please forgive my ignorance if this is the wrong place to do such a
feature request. I noticed that obfs4proxy and obfsproxy were `suggests`
of the tor package, which means tor package users do not necessarily
have obfs4proxy and obfsproxy installed.

However, if this is the right place to request the feature, the
following is some related information which may help the future discussion:

The possible formats to hold those bridges can be:
1. JSON which is also the way tor-connection-wizard used so far[1];
2. plain text which is the same formatt given by the BridgeDB[2] by Tor
Project;
3. "Bridge" + plain text which is ready to be appended to a torrc file
or to be one of the torrc files in /etc/torrc.d/ (or whatever torrc.d
path Debain decides to use)

The default bridge shipped with tor package should be exactly the same
bridges contained in bridge_prefs.js[0] shipped with the latest stable
TBB. This is because:
1. The servers hosting default bridges are set up for huge amount of
traffic;
2. The servers hosting default bridges are probably audited by TPO for
better security;
3. Using a different set of bridges will distinguish the
anon-connection-wizard bridge users from the TBB bridge users, which
compromises their anonymity.

Thank you very much! And looking forward to a further discussion.

Best,
iry

[0]:
https://gitweb.torproject.org/builders/tor-browser-bundle.git/tree/Bundle-Data/PTConfigs/bridge_prefs.js?h=7.5a3-linux
[1]:
https://github.com/irykoon/anon-connection-wizard/blob/master/usr/share/anon-connection-wizard/bridges_default
[2]: https://bridges.torproject.org/options


-- System Information:
Distributor ID: Whonix
Description:    Whonix GNU/Linux 9.1 (stretch)
Release:        9.1
Codename:       stretch
Architecture: x86_64

Versions of packages tor depends on:
ii  adduser              3.115
ii  init-system-helpers  1.48
ii  libc6                2.24-11+deb9u1
ii  libevent-2.0-5       2.0.21-stable-3
ii  libseccomp2          2.3.1-2.1
ii  libssl1.1            1.1.0f-3
ii  libsystemd0          232-25+deb9u1
ii  lsb-base             9.20161125
ii  zlib1g               1:1.2.8.dfsg-5

Versions of packages tor recommends:
ii  logrotate    3.11.0-0.1
ii  tor-geoipdb  0.3.2.0-alpha-dev-20170814T130811Z-1~d90.stretch+1
ii  torsocks     2.2.0-1

Versions of packages tor suggests:
ii  apparmor-utils       2.11.0-3
pn  mixmaster            <none>
ii  obfs4proxy           0.0.7-1+b2
ii  obfsproxy            0.2.13-2
ii  socat                1.7.3.1-2+deb9u1
ii  tor-arm              1.4.5.0-1.1
pn  torbrowser-launcher  <none>

-- no debconf information

--- End Message ---
--- Begin Message ---
On Thu, 17 Aug 2017, Peter Palfrader wrote:

> If upstream starts shipping bridges with their Tor releases, that would
> naturally result in the Tor package shipping bridges as well.
> 
> I do not know whether that's a good idea or not, but I don't think
> deviating from upstream would be particularly worthwhile.

Until then, I'll close this bug in the Debian BTS.

-- 
                            |  .''`.       ** Debian **
      Peter Palfrader       | : :' :      The  universal
 https://www.palfrader.org/ | `. `'      Operating System
                            |   `-    https://www.debian.org/

--- End Message ---

Reply via email to