Whonix Gateway updates

Support
#1

Hello.
When I update/upgrade Whonix Gateway it download updates through Tor ?

#2

Yes it does.

You can also configure Whonix (gateway and workstation) to use .onion repositories.

There are several security and privacy benefits of using Tor onion services:

  • The user cannot be uniquely targeted for malicious updates (attackers are forced to attack everyone requesting the update).
  • The package repository, or observers watching it, can’t track what programs are installed.
  • The ISP cannot easily learn what packages are fetched.
  • End-to-end authentication and encryption provides protection against man-in-the-middle attacks e.g. version downgrade attacks.

https://whonix.org/wiki/Security_Guide#Onionizing_Repositories

3 Likes
#3

Interesting. Any reason why .onion repositories aren’t the default in Whonix?

#4

They will be default for the next release of Whonix (Whonix 14).

Whonix 14 should be released very soon.

https://forums.whonix.org/t/whonix-14-release-blockers-status-of-whonix-14-development/5111/9

2 Likes