Stargate v0.1.0-rc.3

Stargate v0.1.0-rc.3

Updated source and operator documentation for the Stargate browser proxy.
The operator bundle includes Java 25 helpers, setup and maintenance guides,
licenses and notices. The container images and both 0.8.8 browser packages
retain their existing bytes; they were not rebuilt for this release.

Download and verify

Download the nine payloads plus SHA256SUMS and SHA256SUMS.sig. Confirm the
public-key fingerprint through an independent trusted channel, verify the
signature, then check every payload. Follow
download verification.
Server operators should unpack stargate-operator-v0.1.0-rc.3.tar.gz into a new
folder and follow START-HERE.md. Unpacking does not update running services.

The public DER fingerprint is:

affae46c79d99fb6415fa914d752fd712865ccd073ddddfb8d01faddda6e7659

What to expect

• Ordinary websites use Nym, onion sites use Tor, and I2P sites use I2P.
  Optional IPFS uses the configured HTTPS gateway through Nym. Failed routes
  do not switch networks or connect directly.
• Extensions remain 0.8.8. Firefox uses temporary loading; Brave uses
  unpacked loading and manual updates. Do not disable browser signature checks.
• Source manifests are 0.8.9. Building this source does not reproduce the
  retained historical 0.8.8 extension packages. Prebuilt helper JARs are copied
  unchanged; their provenance is recorded in OPERATOR-BUNDLE.json.
• This is a Linux amd64 testing prerelease. Automatic prerequisite installation
  supports Ubuntu 24.04 amd64; other hosts need manual prerequisites.

Use regular browser windows. Trust in the server operator remains necessary:
the operator can see routing metadata and plaintext HTTP content; destination
HTTPS stays encrypted through CONNECT. Nym client identity is shared. This is
not browser-wide leak containment or a substitute for Tor Browser's protections.

No new images, vulnerability scan or browser qualification are included.
Read the privacy limits
and retained security findings.

Source commit: 630ba373d4a0dd98ac00e7394cf3d848e633e354.
Root licensing is Apache-2.0; third-party licenses and credits are preserved.

Stargate v0.1.0-rc.1

Stargate v0.1.0-rc.1 — compatibility downloads

For source, operator tools and the complete signed download set, use
v0.1.0-rc.3.

This release retains the original four image exports, both 0.8.8 browser
packages, public verification key and signed image-updater manifest at their
existing URLs. These files are unchanged. They were not rebuilt from the clean
publication snapshot now selected by this tag.

The tag was deliberately repointed to that clean snapshot. The preserved
release.json.sourceCommit (b2879db9b3f1026167f1511209b8be022aa8eb15)
identifies the historical image-build/release provenance, not the replacement
tag or rc.3 source/operator archives.

Verify current downloads with rc.3's new SHA256SUMS and signature. The old
source/operator archives and their original checksum set are retired; do not
mix old and new checksum files. The updater's separate release.json.sig
authenticates only its existing image manifest. That manifest's original
expiry and genuine image-transition checks still apply; it is not a permanent
update feed.

Normal Firefox requires Mozilla signing for permanent installation. The retained
Firefox XPI supports temporary loading; Brave uses unpacked loading and manual
updates. Read the current installation, privacy and security limits in rc.3.