Feature #8828

Distribute a copy of UUI over HTTPS

Added by sajolida 2015-01-31 10:24:23 . Updated 2017-04-13 10:09:47 .

Status:
Resolved
Priority:
Normal
Assignee:
Category:
Installation
Target version:
2016
Start date:
2015-04-05
Due date:
% Done:

100%

Feature Branch:
Type of work:
Code
Blueprint:

Starter:
Affected tool:
Installation Assistant
Deliverable for:

Description

At least it would be downloaded through HTTPS. That could be a cheap security improvement.

Subtasks

Feature #9158: Have a script to keep track of UUI releases Rejected

0
Feature #9893: Have a Git repo for UUI under our control Resolved

0
Feature #10575: Serve UUI with HTTPS through Gitweb Resolved

100

Related issues

Related to Tails - Feature #8932: Propose to have HTTPS on pendrivelinux.com Resolved 2015-02-21
Related to Tails - Feature #7544: Have a multiplatform Installer Resolved 2015-01-06

History

#1 Updated by intrigeri 2015-02-01 08:48:37

If we go this way, then we need a documented process (along with a responsible person) to upgrade that copy. The good news is that this process could include actually testing the new version, which could be useful to avoid facing regressions.

#2 Updated by sajolida 2015-02-21 19:31:04

  • related to Feature #8932: Propose to have HTTPS on pendrivelinux.com added

#3 Updated by sajolida 2015-02-21 19:36:19

This would be transparent to our installation workflow, so that doesn’t need to be a subtask of Feature #8583.

#4 Updated by sajolida 2015-03-10 09:18:13

This might become actually more secure than HTTPS on pendrivelinux.com if we get in the HPKP preload list of Firefox.

#5 Updated by sajolida 2015-06-08 15:21:11

  • Subject changed from Consider distributing a copy of UUI from our website to Distribute a copy of UUI from our website

#6 Updated by intrigeri 2015-06-08 16:31:42

Just an implementation-related note in passing: this will require another ikiwiki overlay.

#7 Updated by intrigeri 2015-08-03 13:09:47

#8 Updated by emmapeel 2015-08-03 16:30:14

We talked about this on the contributors meeting and we think it will not be so difficult to host some UUI files in git until Feature #7544 gets fixed.

#9 Updated by intrigeri 2015-08-04 02:25:57

  • Type of work changed from Discuss to Code

To clarify, the plan is that we would set up a Git repo + additional ikiwiki overlay, that sajolida would manually update every month or so, without first testing the newly imported UUI.

#10 Updated by sajolida 2015-09-21 03:20:57

  • Target version set to 2016

#11 Updated by sajolida 2015-11-13 01:15:46

  • Affected tool set to Installation Assistant

#12 Updated by sajolida 2016-02-21 19:04:39

  • Status changed from Confirmed to Resolved
  • Assignee deleted (sajolida)

The goal behind this ticket was to have HTTPS on the download of UUI. We’re doing this already now in /install/win/usb, pointing to https://git-tails.immerda.ch/uui-binary/plain/Universal-USB-Installer.exe.

#13 Updated by sajolida 2017-04-13 10:08:17

  • Subject changed from Distribute a copy of UUI from our website to Distribute a copy of UUI over HTTPS

Renaming this old ticket since the result was different than expected.