Allow authentication of Onion Services on Android

Design estimate

• Complexity: small (1 day)
• Uncertainty: moderate (1.5)
• Total: 1.5 days
• Actual:

User story

As a user of Tor Browser for Android
I want to be able to authenticate Onion Services
So I can access them

Context

Tor Browser for Android currently doesn't support Onion Services authentication, which prevent the browser's mobile users from accessing Onion Sites, for example.

Problem statement

Although available on its desktop version, Tor Browser doesn't have authentication of Onion Services on Android. We should make this feature available for mobile users so they can use Onion Services on their phones, without the need of a desktop device.

Scope

• Design a UI for Onion Services authentication on Android

Out of scope

• Web or any other type of authentication

References

Useful links

• HTTP authentication: https://blog.staging.torproject.net/
• Onion authentication: http://pierovlcy7baatz7xcaccbf2kanct3hvkhcgedz4cbrmcg2ybmjalxad.onion/
• List of links to test onion sites
• Client authorization

Screenshots

HTML authentication:


Onion authentication on desktop:

Mockups

TBD

Acceptance criteria

TBD

added component::applications/tor browser in Legacy / Trac owner::tbb-team in Legacy / Trac post-fenix-migration in Legacy / Trac priority::medium in Legacy / Trac severity::normal in Legacy / Trac status::needs-information in Legacy / Trac tbb-mobile in Legacy / Trac tbb-parity in Legacy / Trac type::enhancement in Legacy / Trac labels

How are they using it now?

Trac:
Status: new to needs_information

I think they were using with Orbot+Orfox.

I'd really like to see this feature as well. I want to provide a website via an authenticated Tor service.

Trac:
Username: mynode

We are working on that for sponsor 27 to expose the necessary UI directly in the browser. I wonder whether we'll have time to work the mobile part, too?

Trac:
Cc: N/A to pili, antonela

Replying to gk:

We are working on that for sponsor 27 to expose the necessary UI directly in the browser. I wonder whether we'll have time to work the mobile part, too?

IMO this is not needed or promised. Let's spend that time on the other deliverables that have more users atm.

TBA is out of scope for S27. Could be nice to match this feature in TBA at some point, in the future.

Trac:
Keywords: N/A deleted, tbb-mobile, tbb-parity added

This'll need some UI changes. At this point, I think we should implement this after we migrate to a fenix-based browser on Android.

Trac:
Keywords: N/A deleted, fenix-migration added

Renaming 'fenix-migration' as 'post-fenix-migration'

Trac:
Keywords: fenix-migration deleted, post-fenix-migration added

moved from legacy/trac#31672 (moved)

added Feature Needs Information labels and removed 1 deleted label

added Android Platform Parity labels and removed 1 deleted label

mentioned in issue #40368 (closed)

#40368 (closed) is a duplicate.

mentioned in issue tpo/web/manual#93 (closed)

mentioned in issue tpo/web/manual#97 (closed)

mentioned in merge request tpo/web/manual!14 (merged)

added Icebox label

removed Icebox label