It seems I was wrong about the initial request for the apk being HTTPS, however, this is a general issue with the Play Store and not Orbot specific I believe. Here is the transaction in question.
GET /market/download/Download?packageName=org.thoughtcrime.securesms&versionCode=56&token=AOTCm0QNlhXjrw5kiahs1Onr7JlVKsem-_ZcCnF9J5dy3DOKlIZ9_aVCTOMJgrFcqEMYF4Q0p9sHOHy2w7yvTF826bOBds9reMaPjU2ln94&downloadId=4767185409281152338 HTTP/1.1 Cookie: MarketDA=09494618516075014141 Host: android.clients.google.com Connection: Keep-Alive User-Agent: AndroidDownloadManager/4.2.2 (Linux; U; Android 4.2.2; skz_tenderloin Build/JDQ39E) HTTP/1.1 403 Access is forbidden. Content-Type: text/html; charset=UTF-8 Date: Sat, 31 Aug 2013 06:19:05 GMT Expires: Sat, 31 Aug 2013 06:19:05 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alternate-Protocol: 80:quic Transfer-Encoding: chunked a3 <HTML> <HEAD> <TITLE>Access is forbidden.</TITLE> </HEAD> <BODY BGCOLOR="#FFFFFF" TEXT="#000000"> <H1>Access is forbidden.</H1> <H2>Error 403</H2> </BODY> </HTML> 0 By the way, this is what government blocking looks like (different from above): <html><head><meta http-equiv="Content-Type" content="text/html; charset=windows-1256"><title>M6-8 </title></head><body><iframe src="http://10.10.34.34?type=Invalid<http://10.10.34.34/?type=Invalid> Site&policy=MainPolicy " style="width: 100%; height: 100%" scrolling="no" marginwidth="0" marginheight="0" frameborder="0" vspace="0" hspace="0"></iframe></body></html> I offered the people I knew at Google a shell, if there is any other Google engineer that would be the proper person to connect with, feel free to put them in touch. On Fri, Aug 30, 2013 at 7:59 AM, Nathan Freitas <nat...@freitas.net> wrote: > > > Sherief Alaa <sheriefala...@gmail.com> wrote: > >Hello, > > > >Over the past couple of days Iranian users have been complaining about > >not > >being able to download Orbot from Google's play store (error 403). > > > >To solve the problem we at help desk send the official direct download > >link > >that GP provides[0] but it's only a matter of time before that get > >blocked > >too. > > > >I think GP will need to provide more download options in the future to > >avoid this problem. > > > >[0]: https://guardianproject.info/releases/orbot-latest.apk > > Just to point out something, it was only recently that Google Play was > made available at all directly in Iran. The fact that users can find the > app without filtering is a big step forward. > > We are working with Google and others to understand why the 403 error is > happening, because the download should be using HTTPS. > > Otherwise, you can also find Orbot in the Amazon App Store and via > f-droid.org. > > Thanks for the note. > > +n > > -- > tor-talk mailing list - tor-talk@lists.torproject.org > To unsusbscribe or change other settings go to > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk > -- *Collin David Anderson* averysmallbird.com | @cda | Washington, D.C. -- tor-talk mailing list - tor-talk@lists.torproject.org To unsusbscribe or change other settings go to https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk