#764007 RFP: meek -- Pluggable transport to circumvent IP address blocking via public services

#764007#5
Date:
2014-10-02 17:48:21 UTC
From:
To:
* Package name    : meek
  Version         : 0.12
  Upstream Author : David Fifield <david@bamsoftware.com>
* URL             : https://trac.torproject.org/projects/tor/wiki/doc/meek
* License         : CC0 1.0 Universal
  Programming Lang: Go
  Description     : Pluggable transport to circumvent IP address blocking via public services

Meek is a tool to circumvent censorship by relaying traffic through a
third-party server that is hard to block, for example a ​CDN. It uses a trick
called "domain fronting" to talk to a Tor relay-like service while appearing
to talk to another domain. The traffic itself is HTTPS, aiming to look like a
typical encrypted web session.

This is similar in many respects to flashproxy-client/pt-websocket.
I will be maintaining this as part of the Debian Go Packaging Team.

#764007#10
Date:
2015-07-31 10:23:44 UTC
From:
To:
What's the status of this?

Cheers,
Patrick

#764007#15
Date:
2015-07-31 10:33:39 UTC
From:
To:
Help with it would be appreciated. :) As soon as that is merged, I will upload meek.

If you can't help, you can also find preliminary packages here: https://mentors.debian.net/package/meek

X

#764007#28
Date:
2016-11-05 14:18:00 UTC
From:
To:
Ximin Luo:

To confirm, I still Intend To Package this piece of software. I am waiting on a reply to ticket 12716. My Intent To Package this software will *never expire*, so please do not change it to an RFP "for inactivity" or any other reason.

After 12716 is resolved, this piece of software can be in Debian *within the next day*, or 2-3 hours if luck has it.

Anyone that is interested in seeing meek in Debian should contact the upstream author, David Fifield, to ask him to respond to that ticket. More people would help - I don't wish to ping the same ticket 5 times, I have other things to do with my time.

Frankly, I don't know why he hasn't responded. I won't single out his address here, but it is easy enough to find. Yes, he is still maintaining meek and making updates to it - see the upstream git.

If he does not take ticket #12716 seriously, that is a signal to me that meek should not enter Debian. The browser plugin is vital to offer a good level of protection against fingerprinting. If it is necessary for Tor Browser users, it is necessary for Debian.

I will not have a piece of software that treats Debian users as second-class citizens - we deserve more respect than that, especially given what Debian has contributed to Free and Open Source Software over all these years - and I will block other people from packaging this software in such a degrading way, if so necessary.

However as I said, I will always Intend To Package meek.

X

#764007#33
Date:
2017-09-13 06:10:27 UTC
From:
To:
Hi Ximin Luo!

It seems that the upstream author has respond:
https://trac.torproject.org/projects/tor/ticket/12716#comment:33

For the convenience of the future discussion, I am citing the respond
inline:

Could you please tell me the status of this package?

Thank you very much!

Best,
iry

#764007#38
Date:
2017-09-13 08:29:00 UTC
From:
To:
iry:

I responded on the ticket. If you like, you can try writing a new patch as I described in my response, and ask upstream to merge that one.

X