tor-webwml.git

1) ## translation metadata

2) # Revision: $Revision$

3) 
4) #include "head.wmi" TITLE="Tor: Finding Tor"
5) <div class="main-column">
6) 
7) <h1>Tor: Finding Tor</h1>
8) <hr />
9) <p>

10) Sometimes it's not possible to directly reach the Tor Project website. Here
11) are some ways that you can find and download a current version of
12) Tor if our website is blocked in your area. If you're reading this from
13) a search engine's cache, directly from our

14) website, or by some other method, we hope these suggestions are helpful.

15) Additionally, if you have ideas for how to improve these instructions, please
16) <a href="<page contact>">contact us</a> and let us know.

17) </p>
18) 

19) <a id="WithTor"></a>
20) <h2><a class="anchor" href="#WithTor">Fetching Tor with Tor: Using your
21) web browser</a></h2>

22) <hr />
23) <p>

24) If you're already running Tor, you should be able to download a new Tor

25) securely with your current Tor. You should do this for your friends who don't
26) already have Tor. You can do this from our <a href="<page download>">download
27) page</a> or from a download page on one of the many Tor <a href="<page mirrors>">mirrors</a>.

28) Please take care to <a

29) href="<page verifying-signatures>">verify

30) the signature</a> of any downloaded package when possible.

31) </p>
32) 

33) <a id="Mirrors"></a>
34) <h2><a class="anchor" href="#Mirrors">With a little help from our friends:
35) Using Mirrors</a></h2>

36) <hr />
37) <p>

38) A Tor mirror is a website that contains an exact copy of our main site.
39) We have <a
40) href="<page mirrors>">several dozen mirrors</a> currently, and you
41) can find the list by searching for "Tor mirrors" on your favorite
42) search engine.
43) </p>
44) 
45) <p>
46) It is very important to <a

47) href="<page verifying-signatures>">verify

48) the cryptographic signatures</a> on the Tor software when using any mirror. We

49) cannot ensure the safety or security of any package hosted on remote mirrors

50) without a signature. It's probably safe, but a cautious user should check
51) signatures when possible.

52) </p>
53) 

54) <a id="Mail"></a>
55) <h2><a class="anchor" href="#Mail">Fetching Tor via Gmail: gettor</a></h2>

56) <hr />
57) <p>

58) It is possible to get a copy of Tor by sending an email to a special email
59) address: '<tt>gettor AT torproject.org</tt>'. Now anyone who can send
60) email can get a copy of Tor. A user only needs to send us a request with
61) 'help' in the body of the email, and instructions will be sent as a reply.

62) </p>
63) 
64) <p>
65) To avoid spamming people accidentally, we only answer emails that are sent
66) from email services that support <a href="http://www.dkim.org/">DKIM</a>,

67) which is an email feature that lets us verify that the address in the

68) "From" line is actually the one who sent the mail. Gmail is an example of a
69) mail service that is known to work. If we get an email

70) from a service that doesn't use DKIM, we'll send a short explanation
71) and then ignore the email address for the next day or so.

72) </p>
73) 

74) <a id="IRC"></a>
75) <h2><a class="anchor" href="#IRC">Fetching Tor via IRC: gettor</a></h2>

76) <hr />
77) <p>
78) It is possible to fetch the source code, binaries and other files related to 
79) Tor by using the XDCC IRC file transfer protocol. It is best to attempt this 
80) only if you connect to the IRC server using SSL. Currently <tt>gettor</tt> 

81) is known to spend time on Freenode, 2600, Indymedia and OFTC.

82) <br><br>
83) If you're currently able to connect to one of those IRC networks, look for a 
84) user named '<tt>gettor</tt>' that is connected from the host 
85) '<tt>check.torproject.org</tt>'. Send the user a private message like so:
86) <br>
87) <br>
88) '<tt>/msg gettor xdcc list</tt>'
89) <br>
90) <br>
91) The <tt>gettor</tt> user should respond with a list of files
92) available for download. If there is no response, something has gone wrong. Some
93) IRC networks require that you are registered before you can send private
94) queries to other users (this is often to reduce spam). You may need to register
95) with the NickServ before you can talk to the <tt>'gettor'</tt> user.
96) <br>
97) An example response returned by <tt>gettor</tt> is presented below:<br>
98) <pre>
99) -gettor- ** 14 packs **  20 of 20 slots open, Record: 6397.1KB/s
100) -gettor- ** Bandwidth Usage ** Current: 0.0KB/s, Record: 10.3KB/s
101) -gettor- ** To request a file, type "/msg gettor xdcc send #x" **
102) -gettor- ** To request details, type "/msg gettor xdcc info #x" **
103) -gettor- #1  1x [1.2M] tor-0.1.2.19.tar.gz
104) -gettor- #2  0x [ <1K] tor-0.1.2.19.tar.gz.asc
105) </pre>
106) <br>
107) To fetch the Tor source code and signature file, a user would simply need to
108) send the following commands: <br>
109) <pre>

110) '/msg gettor xdcc send #1'
111) '/msg gettor xdcc send #2'

112) </pre>
113) <br>

114) <p>

115) After these commands are sent, the <tt>gettor</tt> user will respond. It will 
116) send each file as a XDCC file transfer. Depending on the IRC client in use, you may have
117) to manually accept the file, please consult the manual for your software or 

118) <a href="<page contact>">contact us for help</a>.</p>
119) <p>

120) It is
121) very important to <a

122) href="<page verifying-signatures>">verify

123) the cryptographic signatures</a> of our software when using DCC file transfers
124) just as with any type of mirroring. Someone could easily impersonate the IRC 
125) user and send trojaned software. Always validate the cryptographic signature
126) of any package before attempting to do an installation of the software.

127) </p>
128) 

129)   </div><!-- #main -->
130)