[tor-bugs] #16716 [GetTor]: GetTor should have a way to send TPO mirrors

[Tor Bug Tracker & Wiki]

#16716: GetTor should have a way to send TPO mirrors
----------------------------+---------------------
 Reporter:  ilv             |          Owner:  ilv
     Type:  defect          |         Status:  new
 Priority:  Medium          |      Milestone:
Component:  GetTor          |        Version:
 Severity:  Normal          |     Resolution:
 Keywords:  sop15, mirrors  |  Actual Points:
Parent ID:                  |         Points:
  Sponsor:                  |
----------------------------+---------------------
Changes (by ilv):

 * severity:   => Normal


Comment:

 Adding quote from a short chat I had with mrphs:

  "so if we're sending a download link from $mirror, we should make sure
 we've checked the integrity of that file before serving it to user.

  one way to do it, is to check the sig right before sending it to user

  another way is to make sure we check all of the mirrors periodically and
 randomly

  and once we're about to send a link from an specific mirror, we need to
 check if it's been already checked in the past (eg: hour)"

 See #17214.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/16716#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online