The Tor Project issueshttps://gitlab.torproject.org/groups/tpo/-/issues2020-10-16T02:38:07Zhttps://gitlab.torproject.org/tpo/web/support/-/issues/123Update gpg output on "How to verify Tor Browser signature"2020-10-16T02:38:07ZGusUpdate gpg output on "How to verify Tor Browser signature"
https://support.torproject.org/tbb/how-to-verify-signature/
`$ gpg --auto-key-locate nodefault,wkd --locate-keys torbrowser@torproject.org`
```
gpg: key 4E2C6E8793298290: "Tor Browser Developers (signing key) <torbrowser@torproject.org...
https://support.torproject.org/tbb/how-to-verify-signature/
`$ gpg --auto-key-locate nodefault,wkd --locate-keys torbrowser@torproject.org`
```
gpg: key 4E2C6E8793298290: "Tor Browser Developers (signing key) <torbrowser@torproject.org>" 2 new signatures
gpg: Total number processed: 1
gpg: new signatures: 2
pub rsa4096 2014-12-15 [C] [expires: 2025-07-21]
EF6E286DDA85EA2A4BA7DE684E2C6E8793298290
uid [ unknown] Tor Browser Developers (signing key) <torbrowser@torproject.org>
sub rsa4096 2018-05-26 [S] [expires: 2020-12-19]
```https://gitlab.torproject.org/tpo/web/manual/-/issues/49Update Tor Browser for Android user manual docs2020-12-16T18:03:49ZGusUpdate Tor Browser for Android user manual docsAround October 13, a new Tor Browser for Android will be released and we will need to update screenshots and documentation.Around October 13, a new Tor Browser for Android will be released and we will need to update screenshots and documentation.championquizzerchampionquizzer@torproject.orgchampionquizzerchampionquizzer@torproject.orghttps://gitlab.torproject.org/tpo/core/torspec/-/issues/31Audit list of network parameters for completeness2021-09-16T14:40:39ZNick MathewsonAudit list of network parameters for completeness`dir-spec` has a big list of network parameters, but is it complete? No, it's missing at least ExtendByEd25519. What else might it be missing? We should find out.`dir-spec` has a big list of network parameters, but is it complete? No, it's missing at least ExtendByEd25519. What else might it be missing? We should find out.Nick MathewsonNick Mathewsonhttps://gitlab.torproject.org/tpo/web/support/-/issues/122Update pluggable transports link to tb-manual2020-10-09T14:19:46ZGusUpdate pluggable transports link to tb-manualIn this support entry:
"Several countries, including China and Iran, have found ways to detect and block connections to Tor bridges. Obfsproxy bridges address this by adding another layer of obfuscation. Setting up an obfsproxy bridge re...In this support entry:
"Several countries, including China and Iran, have found ways to detect and block connections to Tor bridges. Obfsproxy bridges address this by adding another layer of obfuscation. Setting up an obfsproxy bridge requires an additional software package and additional configurations. See our page on pluggable transports for more info."
https://support.torproject.org/censorship/censorship-7/
We need to change the link to tb-manual pluggable transports section.https://gitlab.torproject.org/tpo/web/manual/-/issues/48Update screenshots and docs to remove (i) Site information icon from the URL bar2021-02-25T01:20:03ZGusUpdate screenshots and docs to remove (i) Site information icon from the URL barTor Browser 10 removed the site information icon and we need to update our documentation accordingly.Tor Browser 10 removed the site information icon and we need to update our documentation accordingly.championquizzerchampionquizzer@torproject.orgchampionquizzerchampionquizzer@torproject.orghttps://gitlab.torproject.org/tpo/web/support/-/issues/121Feedback on https://support.torproject.org/tbb/how-to-verify-signature/ and s...2020-10-14T03:34:21ZGusFeedback on https://support.torproject.org/tbb/how-to-verify-signature/ and suggestions for making it easier to verify tor downloadsFeedback from frontdesk:
Hi, I recently installed tor (thanks so much for this great work). And I have some suggestions for improving the web page instructions to verify downloads. I'm referring to the instructions at https://support.to...Feedback from frontdesk:
Hi, I recently installed tor (thanks so much for this great work). And I have some suggestions for improving the web page instructions to verify downloads. I'm referring to the instructions at https://support.torproject.org/tbb/how-to-verify-signature/ and https://www.torproject.org/download/.
1. The download load page (https://www.torproject.org/download/) makes it tricky to understand how to get the signature. The download page on each of the choices has Signature (?). The ? page does take you to the how to verify sig page, but you have to know where to get the .asc file. I'm sure it's not obvious to naive users, it wasn't obvious to me either.
You might improve the UX of this page to somehow tell the users they need to download the appropriate .asc file.
2. On the how to verify page (https://support.torproject.org/tbb/how-to-verify-signature/), it states the .asc file is found where the download was. But it's a little tricky to figure out that what this really means is you go back one page, then click "save link as" on the 'signature'.
2.a Solution number (a) Download that page automatically when the user clicks on it, the .asc page. That's probably the best solution. On firefox it doesn't download. And on chrome it doesn't download either, it just shows that page. I'm left with copying and saving it through some other program, or "save-as" on that page.
2.b Update the text to be more clear.
Current text:
> Each file on our download page is accompanied by a file with the same name as the package and the extension ".asc". These .asc files are OpenPGP signatures. They allow you to verify the file you've downloaded is exactly the one that we intended you to get.
>
> For example, torbrowser-install-win64-9.0_en-US.exe is accompanied by torbrowser-install-win64-9.0_en-US.exe.asc. These are example file names and will not exactly match the file names that you download.
Suggested text. I highlighted my changes
> Each file on our download page is accompanied by a file with the same name as the package and the extension ".asc", **see the 'signature' files**. These .asc files are OpenPGP signatures. They allow you to verify the file you've downloaded is exactly the one that we intended you to get. **One way to get them is to download the 'signature' file. This varies by web browser, but there's usually an option like "download link" where you "right-click" the 'signature' link and save the file.**
>
> For example, torbrowser-install-win64-9.0_en-US.exe is accompanied by torbrowser-install-win64-9.0_en-US.exe.asc. These are example file names and will not exactly match the file names that you download.https://gitlab.torproject.org/tpo/web/manual/-/issues/47Add a space2021-07-09T17:07:39ZGusAdd a space"Depending on your mobile device&#39;s brand, navigate to Settings &gt; Apps, then select Tor Browser and click on the &quot;Uninstall&quot; button. Afterwards,download the latest Tor Browser release and install it."
Rather: “Afterwards..."Depending on your mobile device's brand, navigate to Settings > Apps, then select Tor Browser and click on the "Uninstall" button. Afterwards,download the latest Tor Browser release and install it."
Rather: “Afterwards, download the”, and again, in a mobile app’s UI, one doesn’t click but taps.https://gitlab.torproject.org/tpo/web/manual/-/issues/46Change "click" to "tap" when mention the mobile app2020-10-13T18:50:29ZGusChange "click" to "tap" when mention the mobile app"If you know your connection is censored, or you have tried and failed to connect to the Tor network and no other solutions have worked, click the switch." ..."If you know your connection is censored, or you have tried and failed to connect to the Tor network and no other solutions have worked, click the switch."
On a mobile app’s UI, one doesn’t click but taps. All such strings should be rephrased.
Page: http://dgvdmophvhunawds.onion/mobile-tor/https://gitlab.torproject.org/tpo/web/manual/-/issues/45Remove double space2021-07-09T17:07:39ZGusRemove double space"When you run Tor Browser for the first time, you will see the option to connect directly to the Tor network, or to configure Tor Browser for your connection with the settings icon."
Double space in “you will see the option to”"When you run Tor Browser for the first time, you will see the option to connect directly to the Tor network, or to configure Tor Browser for your connection with the settings icon."
Double space in “you will see the option to”https://gitlab.torproject.org/tpo/web/manual/-/issues/44Improve security settings writing2020-10-11T06:22:30ZGusImprove security settings writingA translator opened this issue:
"[Security settings](https://tb-manual.torproject.org/security-settings/) disable certain web features that can be used to attack your security and anonymity."
One doesn't attack someone's security and a...A translator opened this issue:
"[Security settings](https://tb-manual.torproject.org/security-settings/) disable certain web features that can be used to attack your security and anonymity."
One doesn't attack someone's security and anonymity, but rather "can be used to compromise your security and anonymity."https://gitlab.torproject.org/tpo/community/support/-/issues/40004[RT] Create a new article to say that YouTube is unhappy with Tor Browser and...2020-10-07T12:52:38ZGus[RT] Create a new article to say that YouTube is unhappy with Tor Browser and what users can doAfter Tor Browser 10.0 release, we're receiving some emails from users reporting that YouTube is not working, see https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40140. We need to create a new RT article to answer the...After Tor Browser 10.0 release, we're receiving some emails from users reporting that YouTube is not working, see https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40140. We need to create a new RT article to answer these users.GusGushttps://gitlab.torproject.org/tpo/network-health/metrics/exit-scanner/-/issues/40001broken links in docs2024-01-16T15:47:58Zanarcatbroken links in docsit's great to have documentation on the exit scanner and check here:
https://gitlab.torproject.org/tpo/network-health/team/-/wikis/Exit-Scanner-Ops
... but there are a bunch of broken links in the page, for example:
https://gitlab.tor...it's great to have documentation on the exit scanner and check here:
https://gitlab.torproject.org/tpo/network-health/team/-/wikis/Exit-Scanner-Ops
... but there are a bunch of broken links in the page, for example:
https://gitlab.torproject.org/tpo/metrics/exit-scanner/-/wikis/check-ops/
https://gitlab.torproject.org/tpo/metrics/exit-scanner/-/wikis/tordnsel
it seems like only a part of the ikiwiki docs were imported here...
also, it would seem important to crossref those docs with https://gitlab.torproject.org/tpo/metrics/team/-/wikis/home
arguably, maybe *all* the metrics docs should be centralised there instead of having multiple wikis like this...https://gitlab.torproject.org/tpo/core/tor/-/issues/40136Revise doc/state-contents.txt to be accurate2021-09-16T14:21:52ZNick MathewsonRevise doc/state-contents.txt to be accurateThe doc/state-contents.txt file is out of date, and missing a bunch of documentation.
We should have accurate documentation for all of the state file's contents.
The following elements are undocumented:
* BWHistoryIPv6ReadEnds
* BWHi...The doc/state-contents.txt file is out of date, and missing a bunch of documentation.
We should have accurate documentation for all of the state file's contents.
The following elements are undocumented:
* BWHistoryIPv6ReadEnds
* BWHistoryIPv6ReadInterval
* BWHistoryIPv6ReadValues
* BWHistoryIPv6ReadMaxima
* BWHistoryIPv6WriteEnds
* BWHistoryIPv6WriteInterval
* BWHistoryIPv6WriteValues
* BWHistoryIPv6WriteMaxima
* Guard
* TotalBuildTimes
* CircuitBuildAbandonedCount
* "CircuitBuildTimeBin"
* "BuildtimeHistogram"
* "MinutesSinceUserActivity"
* "Dormant"
The follow elements are obsolete:
* "EntryGuard"
* "EntryGuardDownSince"
* "EntryGuardUnlistedSince"
* "EntryGuardAddedBy"
These are obsolete _and_ undocumented:
* "EntryGuardPathBias"
* "EntryGuardPathUseBias"
* HidServRevCounterTor: 0.4.5.x-freezeNick MathewsonNick Mathewsonhttps://gitlab.torproject.org/tpo/web/manual/-/issues/43F-Droid should be written with a capital D2020-10-13T19:14:36ZGusF-Droid should be written with a capital DA translator reported that:
"F-Droid should be written with a capital D."
http://dgvdmophvhunawds.onion/mobile-tor/index.htmlA translator reported that:
"F-Droid should be written with a capital D."
http://dgvdmophvhunawds.onion/mobile-tor/index.htmlhttps://gitlab.torproject.org/tpo/web/support/-/issues/120Incorrect GPGTools link2020-09-18T15:53:54ZGusIncorrect GPGTools linkFrom frontdesk:
Hello! This weblink (https://www.gpgtools.org) leads to a security risk site. I believe it needs to link to this site instead: https://gpgtools.org/From frontdesk:
Hello! This weblink (https://www.gpgtools.org) leads to a security risk site. I believe it needs to link to this site instead: https://gpgtools.org/GusGushttps://gitlab.torproject.org/tpo/web/manual/-/issues/42In Mobile Tor section, we should link tickets to GitLab2020-12-01T10:04:16ZGusIn Mobile Tor section, we should link tickets to GitLabUpdate Trac links to GitLab links, so users can follow the issue status.
https://tb-manual.torproject.org/mobile-tor/Update Trac links to GitLab links, so users can follow the issue status.
https://tb-manual.torproject.org/mobile-tor/https://gitlab.torproject.org/tpo/tpa/team/-/issues/40045Make (and update) a services table, with pointers to survival guides for each...2020-09-23T15:15:25ZRoger DingledineMake (and update) a services table, with pointers to survival guides for each serviceWe should make a table of what our services are, and which teams / people are running them.
Here's the original table:
https://trac.torproject.org/projects/tor/wiki/org/operations/services
ahf imported this table into gitlab, but it d...We should make a table of what our services are, and which teams / people are running them.
Here's the original table:
https://trac.torproject.org/projects/tor/wiki/org/operations/services
ahf imported this table into gitlab, but it doesn't seem to display:
https://gitlab.torproject.org/legacy/trac/-/wikis/org/operations/Infrastructure
I'll start with: phw just made a survival guide for check, and it is at:
https://gitlab.torproject.org/tpo/metrics/team/-/wikis/Survival-Guides/Checkanarcatanarcathttps://gitlab.torproject.org/tpo/network-health/sbws/-/issues/40015Bandwidth file spec v1.5 adds Tor version but sbws adds Tor version with band...2020-12-07T11:12:02ZjugaBandwidth file spec v1.5 adds Tor version but sbws adds Tor version with bandwidth file spec as v1.4Reported by @atagar in irc #tor-dev:
```
22:53 <+ atagar> juga, karsten: Our bandwidth file spec says that the most recent version is 1.5.0 to add a tor_version attribute (https://gitweb.torproject.org/torspec.git/commit/?id=7d8b4bc)...Reported by @atagar in irc #tor-dev:
```
22:53 <+ atagar> juga, karsten: Our bandwidth file spec says that the most recent version is 1.5.0 to add a tor_version attribute (https://gitweb.torproject.org/torspec.git/commit/?id=7d8b4bc). However,
CollecTor's most recent bandwidth files (https://collector.torproject.org/recent/relay-descriptors/bandwidths/) say that they're version 1.4.0 yet include a tor_version. Maybe our bandwidth
scanners added this
22:53 <+ atagar> attribute without updating their version number?
22:54 <+ atagar> If so since this has been live for a while we should probably simply change the spec to say that tor_version is a 1.4.0 attribute, and that we don't have a version 1.5.0.
```
probably we forgot to update the bandwidth file spec in the sbws's generated bandwidth file.
I'm not sure whether we should change it in the bandwidth spec or in sbws, since bandwidth spec also says v1.5 adds other things.sbws: 1.1.x-finalhttps://gitlab.torproject.org/tpo/web/tpo/-/issues/96Redirect 2019.www.torproject.org/docs/debian to support.tpo/apt2022-02-02T19:16:46ZGusRedirect 2019.www.torproject.org/docs/debian to support.tpo/aptLast year I migrated this documentation: https://2019.www.torproject.org/docs/debian to support.torproject.org/apt
We should create a new htaccess redirect for that URL to support portal.Last year I migrated this documentation: https://2019.www.torproject.org/docs/debian to support.torproject.org/apt
We should create a new htaccess redirect for that URL to support portal.https://gitlab.torproject.org/tpo/core/tor/-/issues/40101Revise all remaining trac.tpo URLs in Tor repository2021-07-22T16:18:20ZNick MathewsonRevise all remaining trac.tpo URLs in Tor repositoryNick MathewsonNick Mathewson