3 ms·
> There is no technical reason for this unless you want to hide from someone that you are downloading a specific Python package which seems pointless. "Oh, I s
by rakoo 12y ago
> There is no technical reason for this unless you want to hide from someone that you are downloading a specific Python package which seems pointless.
"Oh, I see you're downloading this package in a slightly old version that is still vulnerable. I guess you're going to install it, which means you'll be vulnerable in the next 10 mins"
This is one of the main obstacles of things like apt-p2p or debtorrent (i.e downloading your system packages in a p2p fashion): you don't wan't to tell the whole world what are the packages on your machine.
- falcolas 12y agoAgreed. There is a very technical reason for wanting to encrypt downloads. There's a political reason as well: "I see you just downloaded pycrypto - we're going to throw you on a watchlist since you obviously want to hide something". This speculation is based on past actions doing this very thing with Tor.