## Design estimate - **Complexity:** small (1 day) - **Uncertainty:** moderate (1.5) - **Total:** 1.5 days - **Actual:** ## User story As a user of Tor Browser for Android<br> I want to be able to authenticate Onion Services<br> So I can access them ## Context Tor Browser for Android currently doesn't support Onion Services authentication, which prevent the browser's mobile users from accessing Onion Sites, for example. ## Problem statement Although available on its desktop version, Tor Browser doesn't have authentication of Onion Services on Android. We should make this feature available for mobile users so they can use Onion Services on their phones, without the need of a desktop device. ## Scope - Design a UI for Onion Services authentication on Android ## Out of scope - Web or any other type of authentication ## References ### Useful links - HTTP authentication: https://blog.staging.torproject.net/ - Onion authentication: http://pierovlcy7baatz7xcaccbf2kanct3hvkhcgedz4cbrmcg2ybmjalxad.onion/ - [List of links to test onion sites](https://gitlab.torproject.org/tpo/applications/team/-/wikis/Development-Information/BadSSL-But-Onion) - [Client authorization](https://community.torproject.org/onion-services/advanced/client-auth/) ### Screenshots HTML authentication: <br> <img src="/uploads/e5a06ee62b9113a0627caf74942b8ef4/html_auth_android.png" width="300"> <br> <br> Onion authentication on desktop: <br> <img src="/uploads/64154cdd8fde1be4ee8cffddb2fb69cd/Captura_de_Tela_2025-03-12_às_15.40.05.png" height="500"> ## Mockups TBD ## Acceptance criteria TBD