package: anon-proxy severity: serious x-debbugs-cc: pkg-privacy-maintainers@lists.alioth.debian.org On Sun, Oct 02, 2016 at 05:49:29PM +0200, intrigeri wrote: > Holger Levsen: > > I noticed src:anon-proxy was uploaded today (*) and I am wondering: does it > > still work at all? Is it recommended to use it at all? > > It seems that upstream development stopped in 2009. There have been > quite some developments in this area since then (most of it being > reflected in updates to the Tor design), and I have concerns that > anon-proxy may not safe to use nowadays. > > It seems that their set of free relays is very low: > https://anon.inf.tu-dresden.de/status.php?lang=en > > I guess that Lunar would know more than me about it, but with the > limited info I have in hand, I would recommend _not_ including > anon-proxy in any stable Debian release (and even more so an outdated > release). ok, thanks, for now just filing a bug to prevent it from reaching testing. If this situation doesn't change it's probably proper to file an RM bug to get the package removed from unstable too. -- cheers, Holger
Attachment:
signature.asc
Description: Digital signature