Commit a2c63248 authored by Gus's avatar Gus 🍕
Browse files

Fix #14

parent b2a71ce3
_model: post
---
_template: newsletter.html
---
author: smith@torproject.org
---
pub_date: 2021-03-31
---
title: "TLS certificates for onion sites, new Onion Guide, & petition to ban biometric surveillance"
---
html_body:
<table align="center" border="0" cellpadding="0" cellspacing="0" class="devicewidth" width="650">
<tbody>
<tr>
<td width="100%">
<table align="center" bgcolor="#ffffff" border="0" cellpadding="0" cellspacing="0" class="devicewidth" width="680">
<tbody><!-- Spacing -->
<tr>
<td height="20" width="100%"><a href="https://torproject.org"><img alt="tor-news-logo" src="https://blog.torproject.org/sites/default/files/inline-images/tor-news-logo-560.png" style="width: 250px; height: 75px;" /></a></td>
</tr>
<tr>
<td>
<table align="center" bgcolor="#ffffff" border="0" cellpadding="0" cellspacing="0" class="devicewidth" width="650">
<tbody><!-- /Spacing --><!-- Spacing --><!-- /Spacing --><!-- content -->
<tr>
<td style="padding:0 15px 15px 15px;">
<hr />
<h1 class="title"><a href="https://blog.torproject.org/tls-certificate-for-onion-site" rel="bookmark"><span property="schema:name">Get a TLS certificate for your onion site</span></a></h1>
<p><a href="https://blog.torproject.org/tls-certificate-for-onion-site"><img alt="" src="https://blog.torproject.org/sites/default/files/styles/full_width/public/image/harica-blog.png?itok=Ojmbruz-" style="width: 640px; height: 320px;" /></a></p>
<div class="field field--name-body field--type-text-with-summary field--label-hidden field--item" property="schema:text">
<p>We are happy to share the news of another important milestone for .onion services! You can now get DV certificates for your v3 onion site using <a href="https://www.harica.gr/Contact/GetHarica">HARICA</a>, a Root CA Operator founded by <a href="https://www.gunet.gr/en/">Academic Network (GUnet)</a>, a civil society nonprofit from Greece.</p>
<p>Previously, .onion site administrators who needed a TLS certificate had to either hack other solutions or spend a significant amount of money purchasing an EV certificate. Now with HARICA, acquiring a certificate has become more accessible, but we know that free certificates are ideal and are looking forward to that moment.</p>
<p>We are happy to see <a href="https://www.reddit.com/r/onions/comments/lwaccm/harica_ca_now_supports_issuance_of_dv_onion/">people acquiring certificates for their onions</a>. Remember to do it for a v3 onion address since <a href="https://blog.torproject.org/v2-deprecation-timeline">v2 will be deprecated</a> very soon! <a href="https://blog.torproject.org/tls-certificate-for-onion-site">Read more about getting your own certificate for your onion on your blog</a>.</p>
</div>
<hr />
<div class="css-1dbjc4n">
<div class="css-1dbjc4n r-1s2bzr4">
<h1 class="title"><a href="https://blog.torproject.org/sign-to-reclaim-your-face" rel="bookmark"><span property="schema:name">Sign now: European initiative for a ban on biometric mass surveillance</span> </a></h1>
<p dir="auto"><a href="https://blog.torproject.org/sign-to-reclaim-your-face"><img alt="" src="https://blog.torproject.org/sites/default/files/styles/full_width/public/image/0.%20ECI%20MAIN_launch_Sharepic.png?itok=3yLkKRPs" style="width: 640px; height: 360px;" /></a></p>
<p>The &ldquo;<a href="https://reclaimyourface.eu" rel="noopener" target="_blank">Reclaim Your Face</a>&rdquo; coalition has launched a European Citizens&rsquo; Initiative for a ban on biometric mass surveillance. European Digital Rights (EDRi) and more than fifty organizations are calling to sign the petition. One million signatures must be collected in at least seven EU countries within one year. <a href="https://blog.torproject.org/sign-to-reclaim-your-face">Read more and sign the petition</a>.</p>
<div class="css-901oao r-1fmj7o5 r-1qd0xha r-1blvdjr r-16dba41 r-ad9z0x r-bcqeeo r-bnwqim r-qvutc0" dir="auto" lang="en">
<hr />
<h1 class="title"><span class="quickedit-field" data-quickedit-field-id="node/1998/title/en/full" property="schema:name">Onionize your Workflow with the Onion Guide Fanzine</span></h1>
</div>
</div>
</div>
<p><a href="https://blog.torproject.org/onionize-your-workflow"><img alt="" src="https://blog.torproject.org/sites/default/files/styles/full_width/public/image/onionize-blog-zine.png?itok=d5vXcGFF" style="width: 640px; height: 320px;" /></a></p>
<footer>
<p id="magicdomid9">One way we help human rights defenders and organizations take back their right to privacy online is by helping them to use and set up onion services.</p>
<p id="magicdomid11">Last year, thanks to the support of <a href="https://www.digitaldefenders.org/">Digital Defenders Partnership</a>, we wrote a series of Onion Guides intended to make it easier for our partners to correctly and safely set up their own onion services. To create these Onion Guides, we collected and improved existing disparate information about the benefits of onion services and how to set them up for a website.&nbsp;</p>
<p id="magicdomid26">You can<a href="https://blog.torproject.org/onionize-your-workflow"> learn more about the new Onion Guides on our blog</a> and find the Onion Guide in our <a href="https://community.torproject.org/">community portal</a>, well as the section on <a href="https://community.torproject.org/onion-services/">Onion Services</a> in <a href="https://community.torproject.org/static/images/outreach/print/onion-guide-fanzine-EN.pdf">English</a>, <a href="https://community.torproject.org/static/images/outreach/print/onion-guide-fanzine-ES.pdf">Spanish</a> and <a href="https://community.torproject.org/static/images/outreach/print/onion-guide-fanzine-PT_BR.pdf">Portuguese</a>. Feel free to use it to set up your own .onion site, and let us know how it works for you!</p>
</footer>
<hr />
<h1 class="title"><a href="https://blog.torproject.org/contribute-to-tor-metrics-timeline" rel="bookmark"><span class="quickedit-field" data-quickedit-field-id="node/2004/title/en/teaser" property="schema:name">How to contribute to the Tor metrics timeline</span> </a></h1>
<p>The <a href="https://gitlab.torproject.org/tpo/metrics/timeline">metrics timeline</a> is a database of news and events that may affect <a href="https://metrics.torproject.org/">Tor Metrics</a> graphs. This post is about how you can contribute to the timeline and help keep it up to date.</p>
<p>A timeline of events helps in interpreting graphs. For example, you may look at a graph and ask, &quot;Why did the number of Tor users in Sri Lanka increase for a week in 2018?&quot;</p>
<p><a href="https://blog.torproject.org/contribute-to-tor-metrics-timeline"><img alt="" src="https://blog.torproject.org/sites/default/files/inline-images/userstats-relay-country-lk-2018-02-01-2018-04-15-off.png" style="width: 320px; height: 200px; float: right; margin: 10px 25px;" /></a>Checking the timeline, we find that at that time in Sri Lanka there was a block of Facebook and other services. A likely explanation for the increase of users is that people were using Tor to access the blocked services.</p>
<p>The metrics timeline is useful but incomplete&mdash;for example, it tends to only include events that make international news. Some past events have a start date but are missing an end date. And some events mark unusual graph features, but do not have an explanation.<strong> You can help the Tor Project and people trying to understand use of the Tor network by contributing your knowledge to the metrics timeline. </strong><a href="https://blog.torproject.org/contribute-to-tor-metrics-timeline">Read more about contributing to the Tor metrics timeline</a>.</p>
<hr />
<h1>New Releases</h1>
<h2 class="title"><a href="https://blog.torproject.org/new-release-tor-browser-10014" rel="bookmark"><span property="schema:name">Tor Browser 10.0.14</span></a></h2>
<p>(March 24) This version updates Desktop Firefox to 78.9.0esr. In addition, Tor Browser 10.0.14 updates NoScript to 11.2.3, and Tor to 0.4.5.7. <a href="https://blog.torproject.org/new-release-tor-browser-10014">Full changelog</a>.</p>
<h2 class="title"><a href="https://blog.torproject.org/new-release-tor-browser-105a12" rel="bookmark"><span property="schema:name">Tor Browser 10.5a12 (Android Only)</span></a></h2>
<p>(March 21) This release updates Fenix to 87.0.0-beta.2. Additionally, we update NoScript to 11.2.3 and Tor to 0.4.6.1-alpha. <a href="https://blog.torproject.org/new-release-tor-browser-105a12">Full changelog</a>.</p>
<h2 class="title"><a href="https://blog.torproject.org/node/2011" rel="bookmark"><span property="schema:name">Tor 0.4.6.1-alpha</span></a><a href="https://blog.torproject.org/node/2000" rel="bookmark"> </a></h2>
<p>(March 18) Tor 0.4.6.1-alpha is the first alpha release in the 0.4.6.x series. It improves client circuit performance, adds missing features, and improves some of our DoS handling and statistics reporting. It also includes numerous smaller bugfixes. <a href="https://blog.torproject.org/node/2011">Full changelog.</a></p>
<h2 class="title"><a href="https://blog.torproject.org/node/2009" rel="bookmark"><span property="schema:name">Tor 0.3.5.14, 0.4.4.8, and 0.4.5.7</span></a></h2>
<p>(March 16) These releases fix a pair of denial-of-service issues. We recommend that everybody upgrade to one of the releases that fixes these issues (0.3.5.14, 0.4.4.8, or 0.4.5.7) as they become available to you. <a href="https://blog.torproject.org/node/2009">Full changelog</a><a href="https://blog.torproject.org/new-release-tor-browser-1007">.</a></p>
<h2 class="title"><a href="https://blog.torproject.org/new-release-tor-browser-10013" rel="bookmark"><span property="schema:name">Tor Browser 10.0.13 (Linux Only)</span></a></h2>
<p>(March 3) This version fixes instability on some Linux distributions.<a href="https://blog.torproject.org/new-release-tor-browser-10013"> Full changelog</a>.</p>
<hr />
<h1>What We&#39;re Reading</h1>
<p>&quot;<span data-article-description="The new cameras, which are being implemented nationwide, use artificial intelligence to access drivers' location, movement, and biometric data. " data-article-id="605a08b4a2d7420093776e72" data-article-locale="en_us" data-article-title="Amazon Delivery Drivers Forced to Sign ‘Biometric Consent’ Form or Lose Job" data-article-url="/en/article/dy8n3j/amazon-delivery-drivers-forced-to-sign-biometric-consent-form-or-lose-job" data-direction="down">Amazon Delivery Drivers Forced to Sign &lsquo;Biometric Consent&rsquo; Form or Lose Job</span>,&quot; <a href="https://www.vice.com/en/article/dy8n3j/amazon-delivery-drivers-forced-to-sign-biometric-consent-form-or-lose-job">VICE</a>.</p>
<p>&quot;#KeepItOn: Internet shutdowns only cause harm,&quot; <a href="https://www.business-humanrights.org/en/blog/keepiton-internet-shutdowns-only-cause-harm/">Business &amp; Human Rights Resource Centre.</a></p>
<p>&quot;<span class="db f2 f1-ns black lh-solid">TikTok vs Douyin</span> <span class="db f4 f2-ns mid-gray mt2 lh-title oswald-regular"> A Security and Privacy Analysis</span>,&quot; <span class="article-container"><a href="https://citizenlab.ca/2021/03/tiktok-vs-douyin-security-privacy-analysis/">Citizen Lab</a></span>.</p>
<div>
<p data-qa="headline" id="main-content">&quot;How to get affordable DV certificates for onion sites,&quot; <a href="https://www.helpnetsecurity.com/2021/03/26/how-to-get-affordable-dv-certificates-for-onion-sites/">Help Net Security</a>.</p>
<div>
<p>&quot;T-Mobile to Share Customers&#39; Web Browsing Data With Advertisers Unless They Opt Out,&quot; <a href="https://uk.pcmag.com/networking/132169/t-mobile-to-share-customers-web-browsing-data-with-advertisers-unless-they-opt-out">PCMag</a>.</p>
<p>&quot;California bans &lsquo;dark patterns&rsquo; that trick users into giving away their personal data,&quot; <a href="https://www.theverge.com/2021/3/16/22333506/california-bans-dark-patterns-opt-out-selling-data">The Verge</a>.</p>
</div>
</div>
<hr />
<h1>Join Our Community</h1>
<p>Getting involved with Tor is easy. <a href="https://community.torproject.org/relay/">Run a relay</a> to make the network faster and more decentralized. <a href="https://blog.torproject.org/run-tor-bridges-defend-open-internet">Run a bridge</a> to help censored users access Tor.</p>
<p>Learn about each of our <a href="https://gitlab.torproject.org/tpo/team/-/wikis/home">teams </a>and start collaborating.</p>
<p><a href="https://donate.torproject.org">Donate</a> to help keep Tor fast, strong, and secure.</p>
<div style="background-color: #7d4698; padding: 6px 8px 6px 8px;
-webkit-border-radius:3px; border-radius:3px; margin: 0 auto; width:200px; text-align: center;"><em><a href="https://donate.torproject.org" style="font-size: 24px; font-family: Source sans pro, Helvetica, Arial, sans-serif; font-weight: bold; color: #ffffff; text-decoration: none; display:inline-block;" target="_blank">DONATE</a></em></div>
</td>
</tr>
<tr>
<td style="padding:0 15px;">
<p>The Tor Project is a US 501(c)(3) non-profit organization advancing human rights and freedoms by creating and deploying free and open-source anonymity and privacy technologies, supporting their unrestricted availability and use, and furthering their scientific and popular understanding.</p>
<hr />
<p><a href="https://facebook.com/torproject"><img alt="" src="https://blog.torproject.org/sites/default/files/inline-images/tor-facebook.png" style="width: 25px; height: 25px; margin: 3px;" /></a><a href="https://twitter.com/torproject">&nbsp;<img alt="tor-twitter" src="https://blog.torproject.org/sites/default/files/inline-images/tor-twitter.png" style="width: 25px; height: 25px; margin: 3px;" /></a><a href="https://instagram.com/torproject">&nbsp;<img alt="tor-insta" src="https://blog.torproject.org/sites/default/files/inline-images/instagram-tor-icon_0.jpg" style="width: 25px; height: 25px; margin: 3px;" /></a></p>
<p><small><a href="{action.unsubscribeUrl}">I no longer want to receive Tor News</a> | <a href="{action.optOutUrl}">Please remove this email address from all communications from the Tor Project</a><br />
{domain.address}<br />
<a href="https://torproject.org">torproject.org</a></small></p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
<!-- Spacing -->
_model: post
---
_template: post.html
---
author: smith@torproject.org
---
pub_date: 2021-03-31
---
title: "TLS certificates for onion sites, new Onion Guide, & petition to ban biometric surveillance"
---
body:
## Get a TLS certificate for your onion site
https://blog.torproject.org/tls-certificate-for-onion-site
We are happy to share the news of another important milestone for .onion services! You can now get DV certificates for your v3 onion site using HARICA (https://www.harica.gr/Contact/GetHarica), a Root CA Operator founded by Academic Network (GUnet) (https://www.gunet.gr/en/), a civil society nonprofit from Greece.
Previously, .onion site administrators who needed a TLS certificate had to either hack other solutions or spend a significant amount of money purchasing an EV certificate. Now with HARICA, acquiring a certificate has become more accessible, but we know that free certificates are ideal and are looking forward to that moment.
We are happy to see people acquiring certificates for their onions (https://www.reddit.com/r/onions/comments/lwaccm/harica_ca_now_supports_issuance_of_dv_onion/). Remember to do it for a v3 onion address since v2 will be deprecated very soon (https://blog.torproject.org/v2-deprecation-timeline)! Read more about getting your own certificate for your onion on your blog (https://blog.torproject.org/tls-certificate-for-onion-site).
## Sign now: European initiative for a ban on biometric mass surveillance
https://blog.torproject.org/sign-to-reclaim-your-face
The “Reclaim Your Face” coalition (https://reclaimyourface.eu) has launched a European Citizens’ Initiative for a ban on biometric mass surveillance. European Digital Rights (EDRi) and more than fifty organizations are calling to sign the petition. One million signatures must be collected in at least seven EU countries within one year. Read more and sign the petition. (https://blog.torproject.org/sign-to-reclaim-your-face)
## Onionize your Workflow with the Onion Guide Fanzine
https://blog.torproject.org/onionize-your-workflow
One way we help human rights defenders and organizations take back their right to privacy online is by helping them to use and set up onion services.
Last year, thanks to the support of Digital Defenders Partnership (https://www.digitaldefenders.org/), we wrote a series of Onion Guides intended to make it easier for our partners to correctly and safely set up their own onion services. To create these Onion Guides, we collected and improved existing disparate information about the benefits of onion services and how to set them up for a website.
You can learn more about the new Onion Guides on our blog (https://blog.torproject.org/onionize-your-workflow) and find the Onion Guide in our community portal (https://community.torproject.org/onion-services/), well as the section on Onion Services in English (https://community.torproject.org/static/images/outreach/print/onion-guide-fanzine-EN.pdf), Spanish (https://community.torproject.org/static/images/outreach/print/onion-guide-fanzine-ES.pdf) and Portuguese (https://community.torproject.org/static/images/outreach/print/onion-guide-fanzine-PT_BR.pdf). Feel free to use it to set up your own .onion site, and let us know how it works for you!
## How to contribute to the Tor metrics timeline
https://blog.torproject.org/contribute-to-tor-metrics-timeline
The metrics timeline (https://gitlab.torproject.org/tpo/metrics/timeline) is a database of news and events that may affect Tor Metrics (https://metrics.torproject.org/) graphs. This post is about how you can contribute to the timeline and help keep it up to date.
A timeline of events helps in interpreting graphs. For example, you may look at a graph and ask, "Why did the number of Tor users in Sri Lanka increase for a week in 2018?"
Checking the timeline, we find that at that time in Sri Lanka there was a block of Facebook and other services. A likely explanation for the increase of users is that people were using Tor to access the blocked services.
The metrics timeline is useful but incomplete—for example, it tends to only include events that make international news. Some past events have a start date but are missing an end date. And some events mark unusual graph features, but do not have an explanation. You can help the Tor Project and people trying to understand use of the Tor network by contributing your knowledge to the metrics timeline. Read more about contributing to the Tor metrics timeline (https://blog.torproject.org/contribute-to-tor-metrics-timeline).
## New Releases
### Tor Browser 10.0.14
https://blog.torproject.org/new-release-tor-browser-10014
(March 24) This version updates Desktop Firefox to 78.9.0esr. In addition, Tor Browser 10.0.14 updates NoScript to 11.2.3, and Tor to 0.4.5.7.
### Tor Browser 10.5a12 (Android Only)
https://blog.torproject.org/new-release-tor-browser-105a12
(March 21) This release updates Fenix to 87.0.0-beta.2. Additionally, we update NoScript to 11.2.3 and Tor to 0.4.6.1-alpha.
### Tor 0.4.6.1-alpha
https://blog.torproject.org/node/2011
(March 18) Tor 0.4.6.1-alpha is the first alpha release in the 0.4.6.x series. It improves client circuit performance, adds missing features, and improves some of our DoS handling and statistics reporting. It also includes numerous smaller bugfixes.
### Tor 0.3.5.14, 0.4.4.8, and 0.4.5.7
https://blog.torproject.org/node/2009
(March 16) These releases fix a pair of denial-of-service issues. We recommend that everybody upgrade to one of the releases that fixes these issues (0.3.5.14, 0.4.4.8, or 0.4.5.7) as they become available to you.
### Tor Browser 10.0.13 (Linux Only)
https://blog.torproject.org/new-release-tor-browser-10013
(March 3) This version fixes instability on some Linux distributions.
## What We're Reading
"Amazon Delivery Drivers Forced to Sign ‘Biometric Consent’ Form or Lose Job," VICE. (https://www.vice.com/en/article/dy8n3j/amazon-delivery-drivers-forced-to-sign-biometric-consent-form-or-lose-job)
"#KeepItOn: Internet shutdowns only cause harm," Business & Human Rights Resource Centre. (https://www.business-humanrights.org/en/blog/keepiton-internet-shutdowns-only-cause-harm/)
"TikTok vs Douyin A Security and Privacy Analysis," Citizen Lab. (https://citizenlab.ca/2021/03/tiktok-vs-douyin-security-privacy-analysis/)
"How to get affordable DV certificates for onion sites," Help Net Security. (https://www.helpnetsecurity.com/2021/03/26/how-to-get-affordable-dv-certificates-for-onion-sites/)
"T-Mobile to Share Customers' Web Browsing Data With Advertisers Unless They Opt Out," PCMag. (https://uk.pcmag.com/networking/132169/t-mobile-to-share-customers-web-browsing-data-with-advertisers-unless-they-opt-out)
"California bans ‘dark patterns’ that trick users into giving away their personal data," The Verge. (https://www.theverge.com/2021/3/16/22333506/california-bans-dark-patterns-opt-out-selling-data)
## Join Our Community
Getting involved with Tor is easy. Run a relay to make the network faster and more decentralized: https://community.torproject.org/relay/
Run a bridge to help censored users access Tor: https://blog.torproject.org/run-tor-bridges-defend-open-internet
Learn about more opportunities to start collaborating: https://community.torproject.org/
Donate to help keep Tor fast, strong, and secure. https://donate.torproject.org
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment