Project

General

Profile

Feature #6102

Iceweasel addon - Convergence

Added by Tails almost 5 years ago. Updated almost 4 years ago.

Status:
Rejected
Priority:
Normal
Assignee:
-
Category:
-
Target version:
-
Start date:
Due date:
% Done:

0%

QA Check:
Feature Branch:
Type of work:
Code
Blueprint:
Starter:
No
Affected tool:
Browser

Description

Convergence (homepage) is "an agile, distributed, and secure strategy for replacing Certificate Authorities". It seems like we should ship it at some point, as not all Tails users will learn how to deal with "Monkeysphere":./monkeysphere.html.

Next things to do

We have to wait for a decision regarding which candidate(s) we want to support for the web browser profile with no CA (#5766).

Other reasons to wait

The Tor Browser Bundle developers are waiting for an external audit before shipping it.

Convergence is still not in Debian (ITP: Debian bug #640786).

Upstream bug tracker is a quite full of important bug reports right now. The lack of any SNI support is one of those. Waiting for the software to mature a bit would seem sound.

Implementation

Notaries

What set of notaries should Tails use by default?

Tor hidden services

At least one configured notary must be able to validate certificates for web servers running behind Tor hidden services, i.e. https://xxxxxxxxx.onion. Maybe better to ship a separate Iceweasel profile dedicated to this kind of browsing, that would use "Monkeysphere":./monkeysphere.html instead of Convergence.

Captive portals

When we'll implement support wifi hotspots with captive portals (#5492), the webbrowser configuration dedicated to this task probably need to not use Convergence, as the Convergence client would not be allowed to reach the notaries.

History

#1 Updated by intrigeri almost 5 years ago

  • Type of work changed from Wait to Code

#2 Updated by BitingBird about 4 years ago

  • Subject changed from iceweasel addon - Convergence to Iceweasel addon - Convergence
  • Category set to 176
  • Starter set to No

#3 Updated by BitingBird almost 4 years ago

  • Blocked by deleted (Feature #5766: Web browser profile with no CA)

#4 Updated by BitingBird almost 4 years ago

  • Status changed from Confirmed to Rejected

Convergence is dead. Closing this accordingly.

Also available in: Atom PDF