Re: [tor-dev] Proposals should have reviews. Let's make sure that happens. Here's a schedule.

2016-01-28 Thread Tim Wilson-Brown - teor
> On 28 Jan 2016, at 01:05, Nick Mathewson wrote: > > On Tue, Jan 26, 2016 at 9:01 PM, Tim Wilson-Brown - teor > mailto:teor2...@gmail.com>> wrote: >> >> On 26 Jan 2016, at 23:19, David Goulet wrote: >> >> On 26 Jan (07:00:31), Nick Mathewson wrote: >> >> On Mon, Jan 25, 2016 at 5:14 AM, Dav

Re: [tor-dev] Fwd: [guardian-dev] RC-7 is out - try to repro? Re: towards reproducible Orbot

2016-01-28 Thread Ximin Luo
Hey, thanks for this! I'd like to ask please upload this (or 15.1) to F-Droid soon. The version currently in F-Droid is RC-4 and is broken with orwall - orwall-allowed/redirected apps see no internet, but tor is connected and orfox can access it. RC-7 fixes this issue, I just tested it out. X

Re: [tor-dev] Getting people started on guard selection algorithms [prop259]

2016-01-28 Thread isis
George Kadianakis transcribed 2.1K bytes: > Hello Nick, isis and Mike! > > It seems like some Thoughtworks folks (from here on referred to as FRITO [0]) > are interested in helping us with Tor hidden services development for 4 weeks > or so. They start early next week! :) Hello Fan, Reinaldo, Iva

Re: [tor-dev] Tor not affected by recent openssl security advisories

2016-01-28 Thread Yawning Angel
On Thu, 28 Jan 2016 18:05:51 +0100 Tim Kuijsten wrote: > > It's also worth noting that newer (0.2.7.x) versions of Tor should > > not be doing DHE except when talking to old versions of Tor, linked > > against old versions of OpenSSL as ECDH is both mandatory and > > preferred in the current stabl

Re: [tor-dev] Tor not affected by recent openssl security advisories

2016-01-28 Thread Tim Kuijsten
It's also worth noting that newer (0.2.7.x) versions of Tor should not be doing DHE except when talking to old versions of Tor, linked against old versions of OpenSSL as ECDH is both mandatory and preferred in the current stable series. Is ECDH currently mandatory or did you mean ECDHE?

Re: [tor-dev] Tor not affected by recent openssl security advisories

2016-01-28 Thread Yawning Angel
On Thu, 28 Jan 2016 10:35:21 -0500 Nick Mathewson wrote: > Somebody always asks whether Tor is affected by each OpenSSL advisory, > so I'm sending this mail in order to get a URL to send people to. :) > > Here are today's advisories: >https://mta.openssl.org/pipermail/openssl-announce/2016-J

[tor-dev] Tor not affected by recent openssl security advisories

2016-01-28 Thread Nick Mathewson
Somebody always asks whether Tor is affected by each OpenSSL advisory, so I'm sending this mail in order to get a URL to send people to. :) Here are today's advisories: https://mta.openssl.org/pipermail/openssl-announce/2016-January/61.html With respect to the first ( "DH small subgroups

[tor-dev] Fwd: [guardian-dev] RC-7 is out - try to repro? Re: towards reproducible Orbot

2016-01-28 Thread Nathan Freitas
With this release and updates to our build process, we are close to having Orbot be reproducible. Otherwise, this should be the last RC for v15.1, and it now includes built-in Obfs4, Obfs3, Scramblesuit bridges from TBB, plus a few new ones from Nima. This will make it much easier for users in pla