Trac issueshttps://gitlab.torproject.org/legacy/trac/-/issues2020-06-21T18:05:38Zhttps://gitlab.torproject.org/legacy/trac/-/issues/23226GetTor help message could be more helpful2020-06-21T18:05:38ZTaylor YuGetTor help message could be more helpfulThe GetTor email help message says
```
This is how you can request a tor browser bundle link.
Send an email to: gettor@torproject.org
In the body of the email only write: <operating system> <language>.
We only support windows, osx and...The GetTor email help message says
```
This is how you can request a tor browser bundle link.
Send an email to: gettor@torproject.org
In the body of the email only write: <operating system> <language>.
We only support windows, osx and linux as operating systems.
```
Some things we can add:
- instructions on how to verify the signature
- instructions on how to get bridges?Cecylia BocovichCecylia Bocovichhttps://gitlab.torproject.org/legacy/trac/-/issues/23225GetTor should ignore quoted keywords in email replies that quote the help mes...2020-06-21T18:05:37ZTaylor YuGetTor should ignore quoted keywords in email replies that quote the help messageIf I send an email with the subject "help" to GetTor, and then send an "blank reply that quotes the entire message, I get the links for OrBot for Android (presumably because that's the first recognized keyword in the quoted reply. It's ...If I send an email with the subject "help" to GetTor, and then send an "blank reply that quotes the entire message, I get the links for OrBot for Android (presumably because that's the first recognized keyword in the quoted reply. It's not clear to me what a "blank" reply should produce in response to a help message, maybe a more detailed help message? If there is no more detailed help available, maybe don't mention the blank message option?Cecylia BocovichCecylia Bocovichhttps://gitlab.torproject.org/legacy/trac/-/issues/17425Improve GetTor Signature Section2020-06-21T18:05:23ZSukhbir SinghImprove GetTor Signature SectionThe current GetTor reply we decided earlier was (and which is currently deployed):
```
SHA256 of Tor Browser 32/64-bit (advanced): 443b38f4aa1194125ca3c79157272d5c64006928c9128127788c1cdefa642d85
Fingerprint of key used to sign Tor Brow...The current GetTor reply we decided earlier was (and which is currently deployed):
```
SHA256 of Tor Browser 32/64-bit (advanced): 443b38f4aa1194125ca3c79157272d5c64006928c9128127788c1cdefa642d85
Fingerprint of key used to sign Tor Browser (advanced): 8738 A680 B84B 3031 A630 F2DB 416F 0610 63FE E659
```
We can do better. If you see ticket:9036#comment:16, we will be introducing a new section on signatures and verification of the bundles. This is tricky since on one hand we want users to verify the bundles they downloaded, but on the other, it's not always easy to do so. This ticket will focus on what the text should look like and how we should ensure that users are easily able to verify the bundles.
(It's easier said than done and it's not like we are the first ones trying to solve this problem but we should focus on it from GetTor's context to narrow it down.)https://gitlab.torproject.org/legacy/trac/-/issues/17424Improve GetTor Links2020-06-21T18:05:22ZSukhbir SinghImprove GetTor LinksWe have three providers currently: Dropbox, Google Drive, GitHub.
The current link formatting in the GetTor reply looks like:
```
Tor Browser 32/64-bit:
https://raw.githubusercontent.com/...
https://www.dropbox.com/...
https://docs.goo...We have three providers currently: Dropbox, Google Drive, GitHub.
The current link formatting in the GetTor reply looks like:
```
Tor Browser 32/64-bit:
https://raw.githubusercontent.com/...
https://www.dropbox.com/...
https://docs.google.com/...
```
We should try to make this better. At the minimum, we should tell the user which provider the links refer to so that they can choose without having to guess from the URLs.Israel LeivaIsrael Leivahttps://gitlab.torproject.org/legacy/trac/-/issues/16385Improve links' message2020-06-21T18:05:16ZIsrael LeivaImprove links' messageThis is different from #9036 because these are just minor modifications, mainly order and use of different words (e.g. replaced Tor Browser Bundle by Tor Browser). Below are some sample messages that the user would receive when asking fo...This is different from #9036 because these are just minor modifications, mainly order and use of different words (e.g. replaced Tor Browser Bundle by Tor Browser). Below are some sample messages that the user would receive when asking for Windows and Linux packages. Help message should stay the same. I deleted the actual links to avoid being flagged as spam. Please let me know your thoughts.
```
Hello there! this is the 'GetTor' robot.
Below are the links for your request (Tor Browser for Windows, English package):
[From Dropbox]
========================================================================
Tor Browser 32/64-bit
link-1
Tor Browser's signature 32/64-bit
link-1.asc
Fingerprint of the key used to sign Tor Browser:
EF6E 286D DA85 EA2A 4BA7 DE68 4E2C 6E87 9329 8290
SHA256 checksum of Tor Browser 32/64-bit (advanced)
0491b84de7d88e28c0891ff0e007446dad7f4aa157d145c0f4c823200ae5420b
========================================================================
Still need help? If you have any questions, trouble connecting to Tor
network, or need to talk to a human, please contact our support team at:
help@rt.torproject.org
We are ready to answer your queries in English, Farsi, Chinese, Arabic,
French and Spanish.
```
----
```
Hello there! this is the 'GetTor' robot.
Below are the links for your request (Tor Browser for Linux, English package):
[From Dropbox]
========================================================================
Tor Browser 32-bit
link-2
Tor Browser's signature 32-bit
link-2.asc
Tor Browser 64-bit
link-3
Tor Browser's signature 64-bit
link-3.asc
Fingerprint of the key used to sign Tor Browser:
EF6E 286D DA85 EA2A 4BA7 DE68 4E2C 6E87 9329 8290
SHA256 checksum of Tor Browser 32-bit (advanced)
1ccf6a3bb6cdcef95639f090939e172ba860fc5c5582ebfc1cf49dd87d7b7f3a
SHA256 checksum of Tor Browser 64-bit (advanced)
b9a2ede538ac16765feb92fb057fc7ffb68d6ec2b60009306965fdd509e07259
========================================================================
Still need help? If you have any questions, trouble connecting to Tor
network, or need to talk to a human, please contact our support team at:
help@rt.torproject.org
We are ready to answer your queries in English, Farsi, Chinese, Arabic,
French and Spanish.
```Israel LeivaIsrael Leivahttps://gitlab.torproject.org/legacy/trac/-/issues/3980gettor should deliver checksums of our packages2020-06-21T18:04:51ZRoger Dingledinegettor should deliver checksums of our packagesSome people can't fetch the full packages over gmail, because they're too big, because their gmail interactions are throttled, or because their Internet connection sucks too much to fetch 30MB.
We should deliver checksums with the downl...Some people can't fetch the full packages over gmail, because they're too big, because their gmail interactions are throttled, or because their Internet connection sucks too much to fetch 30MB.
We should deliver checksums with the download links with instructions how to compare them (#3893). Then they can get their Tor from wherever, and verify it.