Re: [tor-dev] Git hosting changes, git:// support discontinued

2014-11-30 Thread Sebastian Hahn
Hi Jason, On 30 Nov 2014, at 23:32, Jason Cooper wrote: > On Sun, Nov 30, 2014 at 06:48:09PM +0100, Sebastian Hahn wrote: >> Access via https:// has been provided for years, and should continue >> to work without any hiccups. > > No issue there for folks that prefer the extra layer. My point is

[tor-dev] Integration testing plans, draft, v1

2014-11-30 Thread Nick Mathewson
Hi! This is the outcome of some discussion I've had with dgoulet, and some work I've done at identifying current problem-points in our use of integration testing tools. I'm posting it here for initial feedback, and so I have a URL to link to in my monthly report. :) INTEGRA

Re: [tor-dev] Git hosting changes, git:// support discontinued

2014-11-30 Thread Yawning Angel
On Sun, 30 Nov 2014 19:19:58 -0500 Jason Cooper wrote: > On Sun, Nov 30, 2014 at 11:55:31PM +, Yawning Angel wrote: > > On Sun, 30 Nov 2014 17:32:05 -0500 > > Jason Cooper wrote: > > > > It is unauthenticated and you probably shouldn't use it if at > > > > all possible. > > > > > > How doe

Re: [tor-dev] Git hosting changes, git:// support discontinued

2014-11-30 Thread Jason Cooper
On Sun, Nov 30, 2014 at 11:55:31PM +, Yawning Angel wrote: > On Sun, 30 Nov 2014 17:32:05 -0500 > Jason Cooper wrote: > > > It is unauthenticated and you probably shouldn't use it if at all > > > possible. > > > > How does that matter? All of the tags are signed by Nick Mathewson. > > This

Re: [tor-dev] Git hosting changes, git:// support discontinued

2014-11-30 Thread Yawning Angel
On Sun, 30 Nov 2014 17:32:05 -0500 Jason Cooper wrote: > > It is unauthenticated and you probably shouldn't use it if at all > > possible. > > How does that matter? All of the tags are signed by Nick Mathewson. > This allows the server *and* the path to be untrusted. What about intermediary co

Re: [tor-dev] Git hosting changes, git:// support discontinued

2014-11-30 Thread Jason Cooper
On Sun, Nov 30, 2014 at 06:48:09PM +0100, Sebastian Hahn wrote: > Hi there, git users! Hi Sebastian! > At the same time, we've discontinued supporting clones via the git:// > Protocol. :( > It is unauthenticated and you probably shouldn't use it if at all > possible. How does that matter? All

Re: [tor-dev] Specification for 'How to Safely Sign a statement with a .onion key'

2014-11-30 Thread Ian Goldberg
On Fri, Nov 28, 2014 at 03:22:18PM +, Steven Murdoch wrote: > On 24 Nov 2014, at 18:54, Tom Ritter wrote: > > > Attached is a document written in the specification format for one > > aspect of CA-signed .onion addresses - specifically a "What is a safe > > way to sign (or not sign) a statemen

[tor-dev] Git hosting changes, git:// support discontinued

2014-11-30 Thread Sebastian Hahn
Hi there, git users! Today, weasel changed our gitweb setup to use cgit from now on in the wake of a migration to wheezy. This move hopefully improves speed without taking away any needed functionality. At the same time, we've discontinued supporting clones via the git:// Protocol. It is unauthen

Re: [tor-dev] Of CA-signed certs and .onion URIs

2014-11-30 Thread Jeremy Rand
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/14/2014 08:37 PM, Jacob Appelbaum wrote: > On 11/15/14, Lee wrote: >>> c) Get .onion IANA reserved >> >> It doesn't look like that's going to happen. >> >> https://datatracker.ietf.org/doc/draft-grothoff-iesg-special-use-p2p-names/ >> >> is e

Re: [tor-dev] sending command from Exit node to client

2014-11-30 Thread rl1987
Tor instances you are running can be controlled via Tor control protocol [0] by software like Stem [1] or arm [2]. Unless something is very wrong, you cannot send commands to Tor instance other person is running. [0] https://gitweb.torproject.org/torspec.git/blob/HEAD:/control-spec.txt [1]