Appendix A

Validating Tor Software

A.1 Validating Tor Software with Gnu Privacy Guard

Gnu Privacy Guard (GnuPG) is the leading OpenPGP-compatible software for public key cryptography, which includes validating digital signatures. It is included by default on most Linux distributions, so acquiring a trusted version of Linux is the simplest and safest way to get the software necessary to validate signed downloads.

To validate a Tor download, follow these steps:

• Download the desired package (e.g., version of TBB appropriate for your system). The file will be named something like “TorBrowser-2.3.25-6-osx-i386-en-US.zip.”

• Download the signature file, named something like “TorBrowser-2.3.25-6-osx-i386-en-US.zip.asc” (in other words, the same ...

Get Practical Anonymity now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.