[Whonix-devel] [qubes-devel] Re: A proposal for the Lantern-Gateway

[Patrick Schleizer]

Overall a great proposal!

And can only agree with the comments by Jean-Philippe.

A lantern downloader would be required indeed. Not sure you already had
that in mind, but I'd also suggest to additionally pre-install lantern.

Not a blocker, but please consider to rename to "censor circumvention
gateway" or so. It could use another good product name that has yet to
be invented. That way you could swap out lantern with another tool in
future should this be required. Then the overhead of changing the
template name would not be required.

I like the idea. You mentioned reasons why lantern should not be
preinstalled in Whonix-Gateway. In essence for security reasons in
Whonix only software from packages.debian.org and The Tor Project get
installed default, third party sources are not as trusted. Yet, easily
accessible and usable circumvention technologies are not available from
these sources in Whonix.

By having a more narrowly focused, separate censorship circumvention
gateway, the security requirements could be relaxed without compromising
on the security of the anonymizing gateway.

Cheers,
Patrick