Tor-enabled Debian mirrors

 

"Richard Hartmann, Peter Palfrader, and Jonathan McDowell have set up the first official onion service mirrors[1] of the Debian operating system's software package infrastructure. This means that it is now possible to update your Debian system without the update information or downloaded packages leaving the Tor network at all, preventing a network adversary from discovering information about your system. A follow-up post[2] by Richard includes guidance on using apt-transport-tor[3] with the new mirrors.

 

These services are only the first in what should hopefully become a fully Tor-enabled system mirroring "the complete package lifecycle, package information, and the website". "This service is not redundant, it uses a key which is stored on the local drive, the .onion will change, and things are expected to break", wrote Richard, but if you are interested in trying out the new infrastructure, see the write-ups for further information."

 

[1] http://richardhartmann.de/blog/posts/2015/08/24-Tor-enabled_Debian_mirror/

[2] http://richardhartmann.de/blog/posts/2015/08/25-Tor-enabled_Debian_mirror_part_2/

[3] https://retout.co.uk/blog/2014/07/21/apt-transport-tor

 

Source: https://blog.torproject.org/blog/tor-weekly-news-%E2%80%94-august-30th-2015