Re: [Tails-dev] Firefox sha256sum checker

Üzenet törlése

Válasz az üzenetre
Szerző: Griffin Boyce
Dátum:  
Címzett: sajolida
CC: The Tails public development discussion list
Tárgy: Re: [Tails-dev] Firefox sha256sum checker
sajolida@??? wrote:
> It took a while for your proposal to mature in my head...
>
> Do you think we could replace Firefox and MD5 Reborned Hasher by Chrome
> and your app in our documentation?


That's an interesting question. Firefox/Iceweasel has a lot going for
it outside of a possible hash checker. This seems like something that
should perhaps be asked of the community rather than myself.
Chrome/Chromium[1] is an interesting browser, but unless it's in the
Tails environment, I wouldn't recommend it for use with Tor. Mike Perry
would have more information on the security implications of switching
from Firefox to Chrome.

> Can you confirm that the same arguments would work for Chrome too?


A&B, definitely. Chrome and Chromium[2] use https for download, but
not sure about pgp authentication. Wasn't able to find anything on it
during a quick search, so am assuming not.

> Then, I never used Chrome before, but how would I got and use your app
> actually? Is that an extension to install or what? :)


To install manually, get the zip: https://github.com/glamrock/satori

* Go to chrome://extensions/
* ☑ Developer mode
* Click "Load unpacked extension"
* Choose Satori/chrome directory

Then go to chrome://apps/ to launch (just like launching any other
app). Once development slows slightly, that repository will have a
gpg-signed zip file to make it easier to install securely outside of
Google's walled garden[3]. Once you have it open, scroll down to the
hash generator, and select a file you have downloaded. Then compare the
displayed hash with what you are expecting.

If it were included in Tails, that would certainly affect UI/design.
Right now, the hash checker is close to the bottom.

best,
Griffin

[1] Chromium is the open-source version of Chrome
[2] https://wiki.debian.org/Chromium
[3]
https://chrome.google.com/webstore/detail/satori/oncomejlklhkbffpdhpmhldlfambmjlf