tor-webwml.git

1) ## translation metadata

2) # Revision: $Revision$

3) # Translation-Priority: 1-high

4) 
5) #include "head.wmi" TITLE="Tor: Finding Tor"
6) <div class="main-column">
7) 
8) <h1>Tor: Finding Tor</h1>
9) <hr />

10) 

11) <p>

12) Sometimes it's not possible to directly reach the Tor Project website. Here
13) are some ways that you can find and download a current version of
14) Tor if our website is blocked in your area. If you're reading this from
15) a search engine's cache, directly from our

16) website, or by some other method, we hope these suggestions are helpful.

17) Additionally, if you have ideas for how to improve these instructions, please
18) <a href="<page contact>">contact us</a> and let us know.

19) </p>
20) 

21) <a id="WithTor"></a>
22) <h2><a class="anchor" href="#WithTor">Fetching Tor with Tor: Using your
23) web browser</a></h2>

24) <hr />

25) 

26) <p>

27) If you're already running Tor, you should be able to download a new Tor

28) securely with your current Tor. You should do this for your friends who don't
29) already have Tor. You can do this from our <a href="<page download>">download
30) page</a> or from a download page on one of the many Tor <a href="<page mirrors>">mirrors</a>.

31) Please take care to <a

32) href="<page verifying-signatures>">verify

33) the signature</a> of any downloaded package when possible.

34) </p>
35) 

36) <a id="Mirrors"></a>
37) <h2><a class="anchor" href="#Mirrors">With a little help from our friends:
38) Using Mirrors</a></h2>

39) <hr />

40) 

41) <p>

42) A Tor mirror is a website that contains an exact copy of our main site.
43) We have <a
44) href="<page mirrors>">several dozen mirrors</a> currently, and you
45) can find the list by searching for "Tor mirrors" on your favorite
46) search engine.
47) </p>
48) 
49) <p>
50) It is very important to <a

51) href="<page verifying-signatures>">verify

52) the cryptographic signatures</a> on the Tor software when using any mirror. We

53) cannot ensure the safety or security of any package hosted on remote mirrors

54) without a signature. It's probably safe, but a cautious user should check
55) signatures when possible.

56) </p>
57) 

58) <a id="Mail"></a>
59) <h2><a class="anchor" href="#Mail">Fetching Tor via Gmail: gettor</a></h2>

60) <hr />

61) 

62) <p>

63) It is possible to get a copy of Tor by sending an email to a special email
64) address: '<tt>gettor AT torproject.org</tt>'. Now anyone who can send
65) email can get a copy of Tor. A user only needs to send us a request with
66) 'help' in the body of the email, and instructions will be sent as a reply.

67) </p>
68) 
69) <p>
70) To avoid spamming people accidentally, we only answer emails that are sent
71) from email services that support <a href="http://www.dkim.org/">DKIM</a>,

72) which is an email feature that lets us verify that the address in the

73) "From" line is actually the one who sent the mail. Gmail is an example of a
74) mail service that is known to work. If we get an email

75) from a service that doesn't use DKIM, we'll send a short explanation
76) and then ignore the email address for the next day or so.

77) </p>
78) 

79) <a id="IRC"></a>
80) <h2><a class="anchor" href="#IRC">Fetching Tor via IRC: gettor</a></h2>

81) <hr />

82) 

83) <p>
84) It is possible to fetch the source code, binaries and other files related to 
85) Tor by using the XDCC IRC file transfer protocol. It is best to attempt this 
86) only if you connect to the IRC server using SSL. Currently <tt>gettor</tt> 

87) is known to spend time on Freenode, 2600, Indymedia and OFTC.

88) <br/><br/>

89) If you're currently able to connect to one of those IRC networks, look for a 
90) user named '<tt>gettor</tt>' that is connected from the host 
91) '<tt>check.torproject.org</tt>'. Send the user a private message like so:

92) <br/>
93) <br/>

94) '<tt>/msg gettor xdcc list</tt>'

95) <br/>
96) <br/>

97) The <tt>gettor</tt> user should respond with a list of files
98) available for download. If there is no response, something has gone wrong. Some
99) IRC networks require that you are registered before you can send private
100) queries to other users (this is often to reduce spam). You may need to register
101) with the NickServ before you can talk to the <tt>'gettor'</tt> user.

102) <br/>
103) An example response returned by <tt>gettor</tt> is presented below:<br/>

104) <pre>
105) -gettor- ** 14 packs **  20 of 20 slots open, Record: 6397.1KB/s
106) -gettor- ** Bandwidth Usage ** Current: 0.0KB/s, Record: 10.3KB/s
107) -gettor- ** To request a file, type "/msg gettor xdcc send #x" **
108) -gettor- ** To request details, type "/msg gettor xdcc info #x" **
109) -gettor- #1  1x [1.2M] tor-0.1.2.19.tar.gz

110) -gettor- #2  0x [ <1K] tor-0.1.2.19.tar.gz.asc

111) </pre>

112) <br/>

113) To fetch the Tor source code and signature file, a user would simply need to

114) send the following commands: <br/>

115) <pre>

116) '/msg gettor xdcc send #1'
117) '/msg gettor xdcc send #2'

118) </pre>

119) <br/>
120) </p>
121) 

122) <p>

123) After these commands are sent, the <tt>gettor</tt> user will respond. It will 
124) send each file as a XDCC file transfer. Depending on the IRC client in use, you may have
125) to manually accept the file, please consult the manual for your software or 

126) <a href="<page contact>">contact us for help</a>.</p>

127) 

128) <p>

129) It is
130) very important to <a

131) href="<page verifying-signatures>">verify

132) the cryptographic signatures</a> of our software when using DCC file transfers
133) just as with any type of mirroring. Someone could easily impersonate the IRC 
134) user and send trojaned software. Always validate the cryptographic signature
135) of any package before attempting to do an installation of the software.

136) </p>
137) 

138)   </div><!-- #main -->
139)