[tor-dev] Leif's important piece on update golden keys

2016-03-07 Thread Spencer
Hi, > > Nathan Freitas: > our goal is to remove any one > person from having the authority > to release an update. > If I understand correctly, this makes sense. > > judicially diverse or robust set of > signatories. > Web of trust for warez; seems like a good idea. > > Can you explain t

Re: [tor-dev] Leif's important piece on update golden keys

2016-03-07 Thread Nathan Freitas
On Mon, Mar 7, 2016, at 11:11 AM, Spencer wrote: > Hi, > > >> > >> Holger Levsen: > >> https://reproducible-builds.org and > >> https://reproducible.debian.net > >> > > Thanks! > > > > > Nathan Freitas: > > https://f-droid.org/wiki/page/Deterministic,_Reproducible_Builds > > > > Thanks!

[tor-dev] Leif's important piece on update golden keys

2016-03-07 Thread Spencer
Hi, >> >> Holger Levsen: >> https://reproducible-builds.org and >> https://reproducible.debian.net >> Thanks! > > Nathan Freitas: > https://f-droid.org/wiki/page/Deterministic,_Reproducible_Builds > Thanks! However, even though reproducible-builds seems to address the manual install as

[tor-dev] Leif's important piece on update golden keys

2016-02-28 Thread Spencer
Hi, > > Nathan Freitas: > [auto update] a threat model we must > take more seriously. > Yay! > > we are making real progress. > Like what? Wordlife, Spencer ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi

[tor-dev] Leif's important piece on update golden keys

2016-02-28 Thread Nathan Freitas
The issues in this timely story came up a number of times today at Tor Dev as a threat model we must take more seriously. Fortunately, thanks to Tor Browser, Lunar, Holger, Hans, Fdroid and others, we are making real progress. http://arstechnica.com/security/2016/02/most-software-already-has-a