apt-transport-tor by default

[ghost]

We should consider to use apt-transport-tor as a default transport system, in order to improve the freepto user anonymity.

If this proposal will accepted, we should modify our /etc/apt/sources.list like so:

deb tor://deb.freepto.mx/freepto berenjena main

and install the following package:

apt-transport-tor

for more info about apt-transport-tor please refer to:
https://github.com/diocles/apt-transport-tor

[boyska]

If apt-transport-tor is stable, we could already add the tool without configuring it for any repository, which I think has broad consensus. Then we can decide whether to configure some repositories to be accessed from tor.

I agree that the deb.freepto.mx repository be accessed by tor: there are no huge packages, so the bandwidth problem is smaller, and we would benefit for less fingerprinting of freepto users (which are much less than debian users!)

[ghost]

I just realized that apt-transport-tor is not available neither from wheezy repository nor wheezy-backports. ¹

Also it depends to a new version of libc6 (>= 2.14), therefore a back-porting is hard and not recommended.

We could leave it pending for the 5 years waiting the next debian stable release ;)

¹ https://packages.debian.org/search?suite=jessie&arch=any&searchon=names&keywords=apt-transport-tor

[boyska]

I'll close it as wontfix, as it would be very difficult to fix, and is not part of our security model

[boyska]

reopening, since we will move to jessie someday ;)