-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Steve McIntyre: > This sounds like a very good idea, thanks! As far as I can see, > we'd need to: > > 1. add the extra packages (tor, apt-transport-tor, anything else?) > > very easy - I can add those to the package lists for d-i and/or > debian-cd very easily > > 2. change the sources.list to use those and the onion addresses > > slightly more involved - we'd need to tweak things, maybe give > users the choice during installation > > 3. if the user chose to use tor at install time, change d-i itself > to use tor for even the initial installation packages > > much more complex - we'd need tor support built into d-i too, I > guess > > If we'd want #3 too, that will need development work in d-i from > somebody who knows tor? >
this is it, in a nutshell. goal would be to do the initial base/package installs over tor at install time. that way, if someone downloaded the netinst.iso with torbrowser, all of the debian install process would later be torified as well, effectively blocking various levels of eyes from seeing that debian was ever used. thank you for the reply. - -- gpg key - 0x2A49578A7291BB34 fingerprint - 63C4 E106 AC6A 5F2F DDB2 3840 2A49 578A 7291 BB34 -----BEGIN PGP SIGNATURE----- iQJ8BAEBCgBmBQJX4hq3XxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ2M0M0RTEwNkFDNkE1RjJGRERCMjM4NDAy QTQ5NTc4QTcyOTFCQjM0AAoJECpJV4pykbs04SAP/38Rf8pr9ebtotPUO5XwVbWE D0osbYnDGtA9EooieArJ3NbISo+yJfDrWjpr4Pymb4tIerv+x+pUCLzwPIMSikVC S2vo4wZtbKql/Z1cSuFlyuhVrmwpv9MOQfoTdj+PQfofujqxWqwc2VQeUBtU8QFN SYanyCZ9eXjQaQz3IliCVdDL7PfcWqxO7OjCkkyFRsWnPyS/hK2v6iu/mOdZVu6X ExqguZk2SXCQdOOkoXhMMT4EH7+beFGDcwIdCuITj8usfP54wMIVgNUvAjj3//QY uneND0BB9/VxF+8y1yoXsPk5PlUjs8BDNfRXYeKKgK+cUK0oCmlPoOqo9XAr53pu 6MOgoLG/mMNw/2VWuTm4VDd/V/ijnqz9B5tgCBP34CeFdCKwQiHUoXTJJ7vPbSfn d5/q850BRnzrxNsZtDUJ4HURlp2dTUPLowY8tR1VQ4uV+Z4LTeLo7zlU1W77h0F6 9TrfrxOy9IoDvhZhOueLJzpaK/fx2Lb24WHNVc8zF58O8qxs4boZk1qZE9nkDCxC BKIOticlerw9VilZT+lMLlN3iK855WOv4dmetyTZ2lD4ZgQ9kTOGyzD7XKZDxeFe cLF2x9LtH5oe8ywwCy1NhOxWyFFsgjhDTx3Etill3oyTtl/kwm+IdQou7apqSs4u fLLjFapnPhHS8dAbbCso =F6e7 -----END PGP SIGNATURE-----
