Re: [Whonix-devel] OpenBSD gateway development

[chiccofx <chi...@to...>]

adrelanos:
> chiccofx:
>> Truth be told, a ssl certificate that signs an entire domain
>> *.example.com and example.com, does not cost that much, perhaps in the
>> figures of a couple hundred of dollars. The problem is to pay for it,
>> and to renew it in a yearly base.
> 
> Yes, startssl certicates are even free (and fine). Hosting isn't very
> expensive. It's just really expensive and difficult to do anonymously.
> 
> ------------------------------------------------------------------------------
> Learn Graph Databases - Download FREE O'Reilly Book
> "Graph Databases" is the definitive new guide to graph databases and 
> their applications. This 200-page book is written by three acclaimed 
> leaders in the field. The early access version is available now. 
> Download your free book today! http://p.sf.net/sfu/neotech_d2d_may
> _______________________________________________
> Whonix-devel mailing list
> Who...@li...
> https://lists.sourceforge.net/lists/listinfo/whonix-devel

It appears that someone read my mind:

http://undeadly.org/cgi?action=article&sid=20130509120042

They are offering digitally signed package updates for the -stable
branch of the OpenBSD pkg/ports. Seems that offering OpenBSD as a
firewall option to whonix, is not that far. The trust still relies on a
third party, and not on the OpenBSD project. But I believe that this is
way more secure than fetching packages in plain text ftp or http, from
OpenBSD mirrors, without any digital signing, which is the way things
happen these days. One more incentive to work on this!

Cheers,

-- 
GPG: 12E9 BCD6 5298 70B5 6C4C  7F1C 8C70 D6ED 188C AACE