Trac issueshttps://gitlab.torproject.org/legacy/trac/-/issues2021-03-22T16:56:26Zhttps://gitlab.torproject.org/legacy/trac/-/issues/21952Onion-location: increasing the use of onion services through automatic redire...2021-03-22T16:56:26ZLinda LeeOnion-location: increasing the use of onion services through automatic redirects and aliasing= Background =
People can't remember, or type in onion sites very easily. We should try to fix this somehow.
ilf is experimenting with automatically redirecting Tor users to .onion versions of websites that they visit (because they ...= Background =
People can't remember, or type in onion sites very easily. We should try to fix this somehow.
ilf is experimenting with automatically redirecting Tor users to .onion versions of websites that they visit (because they want more people to visit onion sites and they will do so if it is painless to them). But when users were redirected automatically to an onion site, they freaked out about it because they didn't know what happened, didn't know what onion sites were, and the "https" was dropped.
asn and dgoulet also were trying to find a solution to make onion sites more accessible to use. Specifically, onion addresses are quite long and random-ish, making them hard to remember and hard to type. There were many solutions discussed casually to try and resolve this, but none stood out as a clear winner.
= Discussion =
I like the idea of redirecting users to .onion sites automatically when they type in the websites non-onion address. This way, users don't need to remember anything else, need to type in anything long, or really even know what onion sites are.
My suggestion is to follow the https design pattern, and create a similar indicator for .onion sites.
![onion-address-idea.png,600px](uploads/onion-address-idea.png,600px)
The proposed solution would be this: when a user types in a website (pad.riseup.net), they would automatically be redirected to the onion site. When this happens, there would be an onion icon next to the address bar (replacing the https lock icon if there is one, or just being there an https lock icon would be if redirection from an http website), similar to that of the https lock icon. The address in the address bar can turned a different color or indicated in some way that this is an alias for the onion site.
From my observation, people don't mind automatically being redirected to https sites from http sites, but freak out when redirected from an http/https site to an onion site. I don't think that this is because people know what https is and find the idea comforting (although this can help). I speculate that they don't mind because they don't notice, and the reason why users freaked out at the redirect to onion sites is that they saw the website address visibly change in the address bar.
Also--
If we want to show users the address of the onion site, we can additionally have a feature to reveal the onion site when the user clicks in the address bar.
![onion-address-secondary-idea.png,600px](uploads/onion-address-secondary-idea.png,600px)
I don't know how I feel about this, since it may just be confusing, and just shock the user later. Users don't know that pad.riseup.net resolves to some numerical IP address, and that isn't displayed to users. So there could be an argument made for just indicating that the address is an alisas and not ever showing the .onion address, either. This will confuse way less of the general population.
= Considerations =
* how should the redirect behavior work?
* how can we implement this without tracking?
* should we allow users to turn off this redirecting behavior?
* should we hide the .onion address from the users more so than the proposal above?Alex CatarineuAlex Catarineuhttps://gitlab.torproject.org/legacy/trac/-/issues/30599Cloudflare alt-svc onions cause a different exit to be used at each request2020-06-16T01:04:17ZcypherpunksCloudflare alt-svc onions cause a different exit to be used at each requestFor some websites, such as zerobin.net which use Cloudflare's new onions, each request might cause a different exit to be used. This is bad both from a load perspective as well as a fingerprinting perspective.
Steps to reproduce: Go to ...For some websites, such as zerobin.net which use Cloudflare's new onions, each request might cause a different exit to be used. This is bad both from a load perspective as well as a fingerprinting perspective.
Steps to reproduce: Go to zerobin.net and create a new paste with "allow discussion" enabled. Post several comments and observe that the visual hash of the IP often changes with each comment. Check the circuit display to verify.https://gitlab.torproject.org/legacy/trac/-/issues/27502Prioritize .onion hosts in AltSvc?2020-06-16T00:50:15ZArthur EdelsteinPrioritize .onion hosts in AltSvc?We now support AltSvc and Mahrud suggested we might want to prioritize .onion AltSvc hosts in Tor Browser. It's an interesting idea and I would need to think about it more to know if it's desirable. Mahrud also pointed out a web page tha...We now support AltSvc and Mahrud suggested we might want to prioritize .onion AltSvc hosts in Tor Browser. It's an interesting idea and I would need to think about it more to know if it's desirable. Mahrud also pointed out a web page that demonstrates AltSvc over .onion:
https://perfectoid.space/test.php
Refresh several times and it will turn green when .onion is being used.Matthew FinkelMatthew Finkelhttps://gitlab.torproject.org/legacy/trac/-/issues/25025Add icon for next-generation onions in the style guide2020-06-13T17:11:55ZAlexander Færøyahf@torproject.orgAdd icon for next-generation onions in the style guideIt would be useful to have an icon like the `onion` and `onion-alt` that symbolises that it's a "next-generation" onion service. This would allow website owners to use the `onion/onion-alt` icon to link to their version 2 onion service a...It would be useful to have an icon like the `onion` and `onion-alt` that symbolises that it's a "next-generation" onion service. This would allow website owners to use the `onion/onion-alt` icon to link to their version 2 onion service and the `onion-ng/onion-ng-alt` icon to link to their next-generation onion service (version 3).Antonelaantonela@torproject.orgAntonelaantonela@torproject.org