Bug #16409

Serve APT repositories as v3 onions

Added by quiet 2019-01-30 11:08:55 . Updated 2019-09-22 06:32:16 .

Status:
Confirmed
Priority:
Normal
Assignee:
Category:
Infrastructure
Target version:
Start date:
2019-01-30
Due date:
% Done:

0%

Feature Branch:
Type of work:
Sysadmin
Blueprint:

Starter:
Affected tool:
Deliverable for:

Description

As read in my sources.list, it seems Tails still uses v2 onion services to serve the Debian repos. It sure would be nice to upgrade to v3 onions for better security. I couldn’t find a related issue so here’s one.

Also, have you considered running the Tails repos as single onion services ? Skipping the onion routing on the server side would make more bandwidth available. I feel like the repos were super slow from over here, but maybe it’s just my connection? https://blog.torproject.org/whats-new-tor-0298


Subtasks


History

#1 Updated by mercedes508 2019-01-31 16:37:24

  • Assignee set to anonym

#2 Updated by intrigeri 2019-02-05 12:12:08

  • Status changed from New to Confirmed
  • Assignee deleted (anonym)

(anonym is not on the sysadmin team.)

#3 Updated by intrigeri 2019-02-05 12:14:11

Yes, this would be sweet. Let’s do this once Buster is out with a tor client that supports v3 (relevant for people who use our repos outside of Tails).

#4 Updated by intrigeri 2019-09-22 06:32:16

  • Subject changed from Upgrade deb repos to v3 onions to Serve APT repositories as v3 onions

Support for HS v3 is now widespread enough so we could this whenever we see fit.