Feature request: disabling all clearnet update checks during installation process

[adw]

@Qubie

In simple words: instead of adding that “sys-whonix as update proxy” feature they should have add feature that really disables all clearnet update checks, 'cause this is really what regular user thinks about when he reads that line about “updates over Tor”.

@Clarity

I haven’t checked it myself, but if it is the case that there are clearnet checks even if sys-whonix is selected as the update proxy, then at the very least the user should be informed – it would be misleading.

Opened an issue for this:

Some users think that enabling updates over Tor in the installer will route all update checks over Tor

@Qubie

And you may agree that otherwise updates over Tor make not so much sense.

No, updating over Tor still has specific security benefits:

Update check without sys-whonix

Downloading dom0 and template updates over Tor can provide specific security benefits by making it more difficult for you to be subject to targeted attacks involving malicious or withheld packages. For example: An attacker may have gained access to an authentic upstream package signing key. He can use this key to sign a malicious package that is intended only for you. If you download updates using Tor, you force him to distribute the malicious package to everyone instead of only to you, which…