August 2018 - tor-commits - lists.torproject.org

[webwml/staging] faq: minor html fix (</li>)
by hiro＠torproject.org 27 Aug '18

27 Aug '18

commit 8b7ae8e3e328584ff9b44aa9d28bd292fd0a9273 Author: traumschule <traumschuleriebau(a)riseup.net> Date: Sun Aug 19 01:59:05 2018 +0200 faq: minor html fix (</li>) --- docs/en/faq.wml | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/docs/en/faq.wml b/docs/en/faq.wml index b095ec09..501c211a 100644 --- a/docs/en/faq.wml +++ b/docs/en/faq.wml @@ -121,8 +121,7 @@ unsafe?</a></li> <li><a href="#DoesntWork">Tor is running, but it's not working correctly.</a></li> <li><a href="#TorCrash">My Tor keeps crashing.</a></li> - <li><a href="#ChooseEntryExit">Can I control which nodes (or -country) + <li><a href="#ChooseEntryExit">Can I control which nodes (or country) are used for entry/exit?</a></li> <li><a href="#FirewallPorts">My firewall only allows a few outgoing ports.</a></li> @@ -136,7 +135,7 @@ country) different computer than my applications.</a></li> <li><a href="#ServerClient">Can I install Tor on a central server, and have my clients connect to it?</a></li> - <li><a href="#IPv6">How do I use Tor from an IPv6 only host/computer?</a><li> + <li><a href="#IPv6">How do I use Tor from an IPv6 only host/computer?</a></li> </ul> <a id="relay"></a>

1 0

[webwml/staging] faq: add note on weaker anonymity for IPv6 (#20045)
by hiro＠torproject.org 27 Aug '18

27 Aug '18

commit aac5a17d82e7d19cb3feba0f7207b659d46bc01e Author: traumschule <traumschuleriebau(a)riseup.net> Date: Sun Aug 19 03:08:35 2018 +0200 faq: add note on weaker anonymity for IPv6 (#20045) --- docs/en/faq.wml | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/docs/en/faq.wml b/docs/en/faq.wml index 501c211a..a70542a9 100644 --- a/docs/en/faq.wml +++ b/docs/en/faq.wml @@ -2102,11 +2102,18 @@ the program iptables (for *nix) useful. <a id="IPv6"></a> <h3><a class="anchor" href="#IPv6">How do I use Tor from an IPv6 only host/computer?</a></h3> - IPv6 is supported since Tor version 0.2.8.x or newer. To activate it add the following two entries into your torrc file: + + IPv6 is supported since Tor version 0.2.8.x or newer. To activate it add + the following two entries into your torrc file: + <pre> ClientUseIPv4 0 ClientUseIPv6 1 </pre> + + Note that as of 2018 there aren't many IPv6 users, or IPv6 guards, so + Tor over IPv6 is less anonymous than Tor over IPv4. + <hr>

1 0

[webwml/staging] onion services: add v3 manual from wiki (fixes #24880)
by hiro＠torproject.org 27 Aug '18

27 Aug '18

commit 0e7b0b7bf5b800ae99beebc0fdf58fef8337cee0 Author: traumschule <traumschuleriebau(a)riseup.net> Date: Sun Aug 19 23:25:31 2018 +0200 onion services: add v3 manual from wiki (fixes #24880) --- docs/en/tor-onion-service.wml | 124 ++++++++++++++++++++++++++++++++++++++---- 1 file changed, 112 insertions(+), 12 deletions(-) diff --git a/docs/en/tor-onion-service.wml b/docs/en/tor-onion-service.wml index 8fc9e894..7ef903e1 100644 --- a/docs/en/tor-onion-service.wml +++ b/docs/en/tor-onion-service.wml @@ -134,8 +134,9 @@ <pre> HiddenServiceDir C:\Users\username\Documents\tor\hidden_service HiddenServicePort 80 127.0.0.1:8080 </pre> - Note that since 0.2.6, both <var>SocksPort</var> and <var>HiddenServicePort</var> support Unix sockets. - This means that you can point the <var>HiddenServicePort</var> to a Unix socket: + Note that since 0.2.6, both <var>SocksPort</var> and <var>HiddenServicePort</var> + support Unix sockets. This means that you can point the <var>HiddenServicePort</var> + to a Unix socket: <pre> HiddenServiceDir /Library/Tor/var/lib/tor/hidden_service/ HiddenServicePort 80 unix:/path/to/socket @@ -199,8 +200,8 @@ service, just add more <var>HiddenServicePort</var> lines. If you want to run multiple onion services from the same Tor client, just add another <var>HiddenServiceDir</var> line. All the following - <var>HiddenServicePort</var> lines refer to this <var>HiddenServiceDir</var> line, until - you add another <var>HiddenServiceDir</var> line: + <var>HiddenServicePort</var> lines refer to this <var>HiddenServiceDir</var> + line, until you add another <var>HiddenServiceDir</var> line: <pre> @@ -212,13 +213,13 @@ HiddenServicePort 22 127.0.0.1:22 </pre> - Onion services operators need to practice proper operational security - and system administration to maintain security. For some security - suggestions please make sure you read over Riseup's <a - href="https://help.riseup.net/en/security/network-security/tor/onionservices-best…">"Tor - Hidden (Onion) Services Best Practices" document</a>. Also, here are some - more anonymity issues you should keep in mind: - + Onion services operators need to practice proper + <a href="https://trac.torproject.org/projects/tor/wiki/doc/OperationalSecurity"> + operational security</a> and system administration to maintain security. + For some security suggestions please make sure you read over Riseup's + <a href="https://help.riseup.net/en/security/network-security/tor/onionservices-best…"> + "Tor Hidden (Onion) Services Best Practices" document</a>. + Also, here are some more anonymity issues you should keep in mind: <ul> <li>As mentioned above, be careful of letting your web server reveal @@ -238,7 +239,13 @@ Another common issue is whether to use HTTPS on your relay or not. Have a look at this <a - href="https://blog.torproject.org/blog/facebook-hidden-services-and-https-certs">post</a> on the Tor Blog to learn more about these issues. + href="https://blog.torproject.org/blog/facebook-hidden-services-and-https-certs">post</a> + on the Tor Blog to learn more about these issues. + + + You can use <a href="https://stem.torproject.org">stem</a> to + <a href="https://stem.torproject.org/tutorials/over_the_river.html"> + automate the management of your onion services</a>. Finally, feel free to use the <a @@ -246,6 +253,99 @@ mailing list</a> to discuss the secure administration and operation of Tor onion services. + <hr> + <a id="four"></a> + <h2><a class="anchor" href="#four">Step Four: Set up next-gen (v3) onions</a></h2> + + + Since Tor 0.3.2 and + <a href="https://blog.torproject.org/tor-browser-75a5-released">Tor Browser + 7.5.a5</a> 56 bit long v3 onion addresses are supported and should be used + instead. This newer version of onion services ("v3") features many + improvements over the legacy system: + + <ul> + <li>Better crypto (replaced SHA1/DH/RSA1024 with SHA3/ed25519/curve25519)</li> + <li>Improved directory protocol, leaking much less information to directory servers.</li> + <li>Improved directory protocol, with smaller surface for targeted attacks.</li> + <li>Better onion address security against impersonation.</li> + <li>More extensible introduction/rendezvous protocol.</li> + <li>A cleaner and more modular codebase.</li> + </ul> + For details see + <a href="https://trac.torproject.org/projects/tor/wiki/doc/HiddenServiceNames"> + Why are v3 onions better?</a>. You can identify a next-generation onion + address by its length: they are 56 characters long, as in + <var>4acth47i6kxnvkewtm6q7ib2s3ufpo5sqbsnzjpbi7utijcltosqemad.onion</a>. + + The specification for next gen onion services can be found + <a href="https://gitweb.torproject.org/torspec.git/tree/rend-spec-v3.txt"> + here</a>. + + + <h3>How to setup your own prop224 service</h3> + + It's easy! Just use your <a href"#two">regular onion service</a> torrc + and add <var>HiddenServiceVersion 3</var> in your onion service torrc block. + Here is an example torrc designed for testing: + + <pre> +SocksPort auto + +HiddenServiceDir /home/user/tmp/hsv3 +HiddenServiceVersion 3 +HiddenServicePort 6667 127.0.0.1:6667 + </pre> + Then your onion address is in <var>/home/user/tmp/hsv3/hostname</var>. + To host both a v2 and a v3 service using two onion service torrc blocks: + + <pre> +HiddenServiceDir /home/user/tmp/hsv2 +HiddenServicePort 6667 127.0.0.1:6667 + +HiddenServiceDir /home/user/tmp/hsv3 +HiddenServiceVersion 3 +HiddenServicePort 6668 127.0.0.1:6667 + </pre> + + Please note that tor is strict about directory permissions and does not + like to share its files. Make sure to restrict read and write access to the + onion services directory before restarting tor. For most linux based systems you can use: + + <pre>chmod 700 -R /var/lib/tor</pre> + + To restart tor it's safer to not use SIGHUP directly (see bug + <a href="https://trac.torproject.org/projects/tor/ticket/21818">#21818</a>), + but to check the validity of the config first. On Debian based systems the + services management tool does this for you: + <pre> + service tor restart + </pre> + + <h3>How to help the next-gen onion development</h3> + + Please let us know if you find any bugs! + We are still in testing & development stage so things are very liquid and + in active development. If you want to help with development, check out the list of + <a href="https://trac.torproject.org/projects/tor/query?status=!closed&keywords=~pro…"> + open prop224 bugs</a>. + + + For researchers our wiki page + <a href="https://trac.torproject.org/projects/tor/wiki/doc/OnionServiceNamingSystems"> + Onion Service Naming Systems</a> could be of value. If you are more of the bug + hunting type, please check our code and spec for errors and inaccuracies. + We would be thrilled to know about them! + + + For debugging and to send us more helpful log files, turn on info logging: + + <pre> +SafeLogging 0 +Log notice file /home/user/tmp/hs/hs.log +Log info file /home/user/tmp/hs/hsinfo.log + </pre> + </div>  <div id = "sidecol">

1 0

[webwml/staging] onion services: mention web servers
by hiro＠torproject.org 27 Aug '18

27 Aug '18

commit 564481faf97292586e0006291bb01376d50d340b Author: traumschule <traumschuleriebau(a)riseup.net> Date: Sun Aug 19 23:31:21 2018 +0200 onion services: mention web servers --- docs/en/tor-onion-service.wml | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/docs/en/tor-onion-service.wml b/docs/en/tor-onion-service.wml index 7ef903e1..2fb77e8d 100644 --- a/docs/en/tor-onion-service.wml +++ b/docs/en/tor-onion-service.wml @@ -56,9 +56,11 @@ - First, you need to set up a web server locally. Setting up a web - server can be complex. We're not going to cover how to set up a web - server here. If you get stuck or want to do more, find a friend who + First, you need to set up a web server locally, for example nginx or + lighttpd (apache is not the best option for anomymity, see + <a href="#three">Step Three</a> below). + Setting up a web server can be complex. We're not going to cover how to set + up a web server here. If you get stuck or want to do more, find a friend who can help you. We recommend you install a new separate web server for your onion service, since even if you already have one installed, you may be using it (or want to use it later) for a normal website.

1 0

[webwml/staging] onion services: add TOC
by hiro＠torproject.org 27 Aug '18

27 Aug '18

commit ee55201c2ddd332b33f8b87d5e804751495b322b Author: traumschule <traumschuleriebau(a)riseup.net> Date: Sun Aug 19 23:36:26 2018 +0200 onion services: add TOC --- docs/en/tor-onion-service.wml | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/docs/en/tor-onion-service.wml b/docs/en/tor-onion-service.wml index 2fb77e8d..4f7929c7 100644 --- a/docs/en/tor-onion-service.wml +++ b/docs/en/tor-onion-service.wml @@ -11,7 +11,8 @@ </div> <div id="maincol"> <h1>Configuring Onion Services for <a href="<page index>">Tor</a></h1> - <hr> + + <hr /> Tor allows clients and relays to offer onion services. That is, you can offer a web server, SSH server, etc., without revealing your @@ -32,6 +33,15 @@ <hr> + <ul> + <li><a href="#zero">Step Zero: Get Tor working</a></li> + <li><a href="#one">Step One: Install a web server locally</a></li> + <li><a href="#two">Step Two: Configure your onion service</a></li> + <li><a href="#three">Step Three: More advanced tips</a></li> + <li><a href="#four">Step Four: Set up next-gen (v3) onions</a></li> + </ul> + <hr> + <a id="zero"></a> <h2><a class="anchor" href="#zero">Step Zero: Get Tor working</a></h2>

1 0

[webwml/staging] onion services: add link to Alec Muffett's Enterprise Onion Toolkit
by hiro＠torproject.org 27 Aug '18

27 Aug '18

commit c47b250c55ef6ef7541977a56908a335a43669cd Author: traumschule <traumschuleriebau(a)riseup.net> Date: Tue Aug 21 04:06:06 2018 +0200 onion services: add link to Alec Muffett's Enterprise Onion Toolkit --- docs/en/tor-onion-service.wml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/docs/en/tor-onion-service.wml b/docs/en/tor-onion-service.wml index 4f7929c7..4319ad3c 100644 --- a/docs/en/tor-onion-service.wml +++ b/docs/en/tor-onion-service.wml @@ -225,6 +225,9 @@ HiddenServicePort 22 127.0.0.1:22 </pre> + To set up an onion service on Raspbian have a look at Alec Muffett's + <a href="https://github.com/alecmuffett/eotk">Enterprise Onion Toolkit</a>. + Onion services operators need to practice proper <a href="https://trac.torproject.org/projects/tor/wiki/doc/OperationalSecurity"> operational security</a> and system administration to maintain security.

1 0

[webwml/staging] faq: tell where Tor's data directory is (#11289)
by hiro＠torproject.org 27 Aug '18

27 Aug '18

commit 278841e131d2b49ed397bbbe26ff444bf4d6e7ea Author: traumschule <traumschuleriebau(a)riseup.net> Date: Tue Aug 21 07:32:22 2018 +0200 faq: tell where Tor's data directory is (#11289) --- docs/en/faq.wml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/docs/en/faq.wml b/docs/en/faq.wml index 0a9b38ee..86e21a8a 100644 --- a/docs/en/faq.wml +++ b/docs/en/faq.wml @@ -1557,6 +1557,12 @@ it.) +If you are looking for Tor's data directory: for TBB it's <var>Data/Tor/</var>, +and for most system packages it's <var>/var/lib/tor/</var>. Run as user tor +stores things in <var>$HOME/.tor</var> on Unix. + + + For other configuration options you can use, see the <a href="<page docs/tor-manual>">Tor manual page</a>. Have a look at <a href="https://gitweb.torproject.org/tor.git/tree/src/config/torrc.sample.in">

1 0

[webwml/staging] faq: add ipv6 wiki resources (#20045)
by hiro＠torproject.org 27 Aug '18

27 Aug '18

commit 1fee6ee4bfc6b0c08a83790c4167fe1423f5c83c Author: traumschule <traumschuleriebau(a)riseup.net> Date: Mon Aug 20 13:57:44 2018 +0200 faq: add ipv6 wiki resources (#20045) --- docs/en/faq.wml | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/docs/en/faq.wml b/docs/en/faq.wml index a70542a9..1c639c10 100644 --- a/docs/en/faq.wml +++ b/docs/en/faq.wml @@ -2111,8 +2111,11 @@ the program iptables (for *nix) useful. ClientUseIPv6 1 </pre> - Note that as of 2018 there aren't many IPv6 users, or IPv6 guards, so - Tor over IPv6 is less anonymous than Tor over IPv4. + Note that as of 2018 there aren't many IPv6 users, or IPv6 guards, so Tor over IPv6 + is less anonymous than Tor over IPv4. You can review the IPv6 implemetation status at our + <a href="https://trac.torproject.org/projects/tor/wiki/org/roadmaps/Tor/IPv6Features">IPv6Features</a> + wiki page, known issues can be found with the + <a href="https://trac.torproject.org/projects/tor/query?status=!closed&keywords=~ipv6">ipv6 keyword</a>. <hr>

1 0

[webwml/staging] faq: improved torrc/datadir section ; several housekeeping tasks
by hiro＠torproject.org 27 Aug '18

27 Aug '18

commit d7568ec679bffe1cbfa25a5d71dc41215b197251 Author: traumschule <traumschuleriebau(a)riseup.net> Date: Wed Aug 22 00:44:07 2018 +0200 faq: improved torrc/datadir section ; several housekeeping tasks - linked first occurrence of torrc in every answer to #torrc - replaced absolute links to torproject.org with relative ones - added TODO to questions in html comments --- docs/en/faq.wml | 130 +++++++++++++++++++++++++++++++++----------------------- 1 file changed, 78 insertions(+), 52 deletions(-) diff --git a/docs/en/faq.wml b/docs/en/faq.wml index 04718a37..05eaff4e 100644 --- a/docs/en/faq.wml +++ b/docs/en/faq.wml @@ -119,6 +119,7 @@ <ul> <li><a href="#torrc">I'm supposed to "edit my torrc". What does that mean?</a></li> + <li><a href="#datadir">Where's tor's data directory?</a></li> <li><a href="#Logs">How do I set up logging, or see Tor's logs?</a></li> <li><a href="#LogLevel">What log level should I use?</a></li> @@ -1067,7 +1068,7 @@ idea. Tor Browser aims to provide sufficient privacy that additional add-ons to stop ads and trackers are not necessary. Using add-ons like these may cause some sites to break, which - <a href="https://www.torproject.org/projects/torbrowser/design/#philosophy"> + <a href="/projects/torbrowser/design/#philosophy"> we don't want to do</a>. Additionally, maintaining a list of "bad" sites that should be black-listed provides another opportunity to uniquely fingerprint users. @@ -1417,15 +1418,15 @@ - First (best option), if you're on Linux, you can install the system - Tor package (e.g. apt-get install tor) and then set it up to be a relay - (<a href="https://www.torproject.org/docs/tor-relay-debian"> - instructions</a>). You can then use TBB independent of that. + First (best option), if you're on Linux, you can install the + <a href="<page download/download-unix>">system Tor package</a> + (e.g. apt-get install tor) and then set it up to be a relay + (<a href="https://www.torproject.org/docs/tor-relay-debian">instructions</a>). + You can then use TBB independent of that. - - Second (complex option), you can edit your torrc file (in Data/Tor/torrc) + Second (complex option), you can edit your <a href="#torrc">torrc file</a> directly to add the following lines: @@ -1468,7 +1469,8 @@ README file</a> for the build instructions. There is also some informations in the <a href="https://trac.torproject.org/projects/tor/wiki/doc/TorBrowser/Hacking"> - Tor Browser Hacking Guide</a>. + Tor Browser Hacking Guide</a>. Also see our + <a href="<page docs/verifying-signatures>">fingerprint verification guide</a>. <hr> @@ -1476,9 +1478,9 @@ <a id="AdvancedTorUsage"></a> <h2><a class="anchor" href="#AdvancedTorUsage">Advanced Tor usage:</a></h2> - <a id="torrc"></a> + <a id="torrc"></a><a id="datadir"></a> <h3><a class="anchor" href="#torrc">I'm supposed to "edit my torrc". - What does that mean?</a></h3> + What does that mean? Where's tor's data directory?</a></h3> Tor uses a text file called torrc that contains configuration @@ -1487,26 +1489,47 @@ - If you installed Tor Browser on Windows or Linux, look for - <code>Browser/TorBrowser/Data/Tor/torrc</code> inside your Tor Browser - directory. - If you're on macOS, the torrc is in + If you installed Tor Browser on Windows or Linux, torrc is in the data + directory, which is <code>Browser/TorBrowser/Data/Tor</code> inside your + Tor Browser directory. For the tor service on Windows see + <a href="#NTService">Windows NT</a>. + + + + If you're on macOS, the torrc is in the data directory at <code>~/Library/Application Support/TorBrowser-Data/Tor</code>. To get to it, press cmd-shift-g while in Finder and copy/paste that directory into the box that appears. - Otherwise, if you are using Tor without Tor Browser, it looks for the - torrc file in <code>/usr/local/etc/tor/torrc</code> if you compiled tor - from source, and <code>/etc/tor/torrc</code> or <code>/etc/torrc</code> - if you installed a pre-built package. + Otherwise, if you are using Tor without Tor Browser, it looks for torrc at + differentt possible locations: + <ul> + <li> + <code>/usr/local/etc/tor/torrc</code> if you compiled tor from source + </li> + <li> + <code>/etc/tor/torrc</code> or <code>/etc/torrc</code> if you installed a + pre-built package. The data directory usually is + <code>/var/lib/tor/</code>, if not defined otherwise with + <code>DataDirectory</code> in torrc. + </li> + <li><code>$HOME/.torrc</code>: fallback location if above file is not found. + </li> + <li> + You can define a different location for torrc with <code>-f FILE</code> and + set another data directory with <code>--DataDirectory DIR</code> as options + to tor. + </li> + </ul> - Once you've created or changed your torrc file, you will need to restart - tor for the changes to take effect. (For advanced users, note that - you actually only need to send Tor a HUP signal, not actually restart it.) + Once you've created or changed your torrc file, you will need to restart or + reload tor for the changes to take effect. On Debian use + <code>system tor reload</code>. (For advanced users, note that you + actually only need to send Tor a HUP signal, not actually restart it.) @@ -1533,7 +1556,7 @@ <li>On OS X, Debian, Red Hat, etc, the logs are in /var/log/tor/ </li> <li>On Windows, there are no default log files currently. If you enable - logs in your torrc file, they default to <code>\username\Application + logs in your <a href="#torrc">torrc</a> file, they default to <code>\username\Application Data\tor\log\</code> or <code>\Application Data\tor\log\</code> </li> <li>If you compiled Tor from source, by default your Tor logs to @@ -1718,7 +1741,7 @@ If you don't find any good hints, you should consider running Tor in the foreground (from a shell) so you can see how it dies. Warning: if you switch to running Tor in the foreground, you might start using a different - torrc file, with a different default Data Directory; see the + <a href="#torrc">torrc</a> file, with a different default Data Directory; see the <a href="#UpgradeOrMove">relay-upgrade FAQ entry</a> for details. </li> @@ -1755,8 +1778,8 @@ Yes. You can set preferred entry and exit nodes as well as inform Tor which nodes you do not want to use. - The following options can be added to your config file <a - href="#torrc">"torrc"</a> or specified on the command line: + The following options can be added to your config file + <a href="#torrc">torrc</a> or specified on the command line: <dl> <dt><tt>EntryNodes $fingerprint,$fingerprint,...</tt></dt> @@ -1818,7 +1841,7 @@ versions. If your firewall works by blocking ports, then you can tell Tor to only use the ports when you start your Tor Browser. Or you can add the ports that your firewall permits by adding "FascistFirewall 1" to your - <a href="<page docs/faq>#torrc">torrc configuration file</a>. + <a href="#torrc">torrc configuration file</a>. By default, when you set this Tor assumes that your firewall allows only port 80 and port 443 (HTTP and HTTPS respectively). You can select a different set of ports with the FirewallPorts torrc option. @@ -1841,9 +1864,11 @@ versions. ports?</a></h3> The default open ports are listed below but keep in mind that, any port or - ports can be opened by the relay operator by configuring it in torrc or - modifying the source code. But the default according to src/or/policies.c - from the source code release tor-0.2.4.16-rc is: + ports can be opened by the relay operator by configuring it in + <a href="#torrc">torrc</a> or modifying the source code. +  + The default according to src/or/policies.c from the source code release + tor-0.2.4.16-rc: <pre> reject 0.0.0.0/8 @@ -1934,7 +1959,7 @@ versions. with tor-resolve, then pass the IPs to your applications, you'll be fine. (Tor will still give the warning, but now you know what it means.) </li> - <!-- I'm not sure if this project is still maintained or not + <!-- TODO I'm not sure if this project is still maintained or not <li>You can use TorDNS as a local DNS server to rectify the DNS leakage. See the Torify HOWTO for info on how to run particular applications anonymously.</li> @@ -1993,7 +2018,7 @@ versions. By default, your Tor client only listens for applications that connect from localhost. Connections from other computers are refused. If you want to torify applications on different computers - than the Tor client, you should edit your torrc to define + than the Tor client, you should edit your <a href="#torrc">torrc</a> to define SocksListenAddress 0.0.0.0 and then restart (or hup) Tor. If you want to get more advanced, you can configure your Tor client on a firewall to bind to your internal IP but not your external IP. @@ -2019,7 +2044,7 @@ versions. key all around. - Configuration is simple, editing your torrc file's SocksListenAddress + Configuration is simple, editing your <a href="#torrc">torrc</a> file's SocksListenAddress according to the following examples: @@ -2130,8 +2155,8 @@ versions. using a dynamic IP address?</a></h3> - Tor can handle relays with dynamic IP addresses just fine. Just leave - the "Address" line in your torrc blank, and Tor will guess. + Tor can handle relays with dynamic IP addresses just fine. Just leave the + "Address" line in your <a href="#torrc">torrc</a> blank, and Tor will guess. <hr> @@ -2143,9 +2168,9 @@ versions. Tor has <a href="<wiki>org/roadmaps/Tor/IPv6Features">partial</a> support for IPv6 and we encourage every relay operator to <a href="<wiki>TorRelayGuide#IPv6">enable IPv6 functionality</a> in their - torrc configuration files when IPv6 connectivity is available. - For the time being Tor will require IPv4 addresses on relays, you can not - run a Tor relay on a host with IPv6 addresses only. + <a href="#torrc">torrc</a> configuration files when IPv6 connectivity is + available. For the time being Tor will require IPv4 addresses on relays, + you can not run a Tor relay on a host with IPv6 addresses only. <hr> @@ -2244,7 +2269,7 @@ versions. options are available to Tor relays?</a></h3> - There are two options you can add to your torrc file: + There are two options you can add to your <a href="#torrc">torrc</a> file: <ul> <li> @@ -2298,7 +2323,7 @@ versions. <h3><a class="anchor" href="#LimitTotalBandwidth">How can I limit the total amount of bandwidth used by my Tor relay?</a></h3> - The accounting options in the torrc file allow you to specify the maximum + The accounting options in the <a href="#torrc">torrc</a> file allow you to specify the maximum amount of bytes your relay uses for a time period. <pre> @@ -2394,7 +2419,7 @@ versions. working relay setup) is as follows: <ul> - <li>In the relay Tor torrc file, simply set the SocksPort to 0.</li> + <li>In the relay Tor <a href="#torrc">torrc</a> file, simply set the SocksPort to 0.</li> <li>Create a new client torrc file from the torrc.sample and ensure it uses a different log file from the relay. One naming convention may be torrc.client and torrc.relay.</li> @@ -2574,7 +2599,7 @@ don't want to deal with abuse issues.</a></h3> This means that if you're upgrading your Tor relay and you keep the same - torrc and the same DataDirectory, then the upgrade should just work and + <a href="#torrc">torrc and the same DataDirectory</a>, then the upgrade should just work and your relay will keep using the same key. If you need to pick a new DataDirectory, be sure to copy your old keys/ed25519_master_id_secret_key and keys/secret_id_key over. @@ -2615,7 +2640,7 @@ don't want to deal with abuse issues.</a></h3> and confirms that the medium term signing key is valid for a certain period of time. The default validity is 30 days, but this can be customized by setting "SigningKeyLifetime N days|weeks|months" in - torrc.</li> + <a href="#torrc">torrc</a>.</li> <li>there is also a master public key named "ed25519_master_id_public_key, which is the actual identity of the relay advertised in the network. This one is not sensitive and can be easily @@ -2681,7 +2706,7 @@ don't want to deal with abuse issues.</a></h3> Optionally, you can specify additional options for the Tor service using the -options argument. For example, if you want Tor to use C:\tor\torrc, - instead of the default torrc, and open a control port on port 9151, you + instead of the default <a href="#torrc">torrc</a>, and open a control port on port 9151, you would run: @@ -3119,9 +3144,10 @@ href="https://www.noisebridge.net/wiki/Noisebridge_Tor">Noisebridge</a> tool for configuring, controlling and running tests on a testing Tor network. It requires that you have Tor and Python (2.5 or later) installed on your system. You can use Chutney to create a testing - network by generating Tor configuration files (torrc) and necssary keys - (for the directory authorities). Then you can let Chutney start your Tor - authorities, relays and clients and wait for the network to bootstrap. + network by generating Tor configuration files (<a href="#torrc">torrc</a>) + and necessary keys (for the directory authorities). Then you can let + Chutney start your Tor authorities, relays and clients and wait for the + network to bootstrap. Finally, you can have Chutney run tests on your network to see which things work and which do not. Chutney is typically used for running a testing network with about 10 instances of Tor. Every instance of Tor @@ -3265,7 +3291,7 @@ href="https://www.noisebridge.net/wiki/Noisebridge_Tor">Noisebridge</a> a series of proxies. Your communication is encrypted in multiple layers and routed via multiple hops through the Tor network to the final receiver. More details on this process can be found in the <a - href="https://www.torproject.org/about/overview">Tor overview</a>. + href="<page about/overview>">Tor overview</a>. Note that all your local ISP can observe now is that you are communicating with Tor nodes. Similarly, servers in the Internet just see that they are being contacted by Tor nodes. @@ -3371,7 +3397,7 @@ href="https://www.noisebridge.net/wiki/Noisebridge_Tor">Noisebridge</a> identity leaks, Tor Browser also includes browser extensions like NoScript and Torbutton, as well as patches to the Firefox source code. The full design of Tor Browser can be read <a - href="https://www.torproject.org/projects/torbrowser/design/">here</a>. + href="/projects/torbrowser/design/index.html.en">here</a>. In designing a safe, secure solution for browsing the web with Tor, we've discovered that configuring <a href="#TBBOtherBrowser">other browsers</a> to use Tor is unsafe. @@ -3386,7 +3412,7 @@ href="https://www.noisebridge.net/wiki/Noisebridge_Tor">Noisebridge</a> Tor is a work in progress. There is still <a - href="https://www.torproject.org/getinvolved/volunteer">plenty of work + href="<page getinvolved/volunteer>">plenty of work left to do</a> for a strong, secure, and complete solution. @@ -3649,7 +3675,7 @@ href="https://www.noisebridge.net/wiki/Noisebridge_Tor">Noisebridge</a> anonymity solution</a>. If you're looking for a trusted entry into the Tor network, or if you want to obscure the fact that you're using Tor, - <a href="https://www.torproject.org/docs/bridges#RunningABridge">setting up + <a href="<page docs/bridges>#RunningABridge">setting up a private server as a bridge</a> works quite well. @@ -3796,7 +3822,7 @@ Perhaps even run separate Tor clients for these applications. First, we need to make Tor stable as a relay on all common operating systems. The main remaining platform is Windows, and we're mostly there. See Section 4.1 of - <a href="https://www.torproject.org/press/2008-12-19-roadmap-press-release"> + <a href="<page press/2008-12-19-roadmap-press-release>"> our development roadmap</a>. @@ -4248,7 +4274,7 @@ Perhaps even run separate Tor clients for these applications. Please read the - <a href="https://www.torproject.org/eff/tor-legal-faq">legal FAQ written + <a href="<page eff/tor-legal-faq>">legal FAQ written by EFF lawyers</a>. There's a growing <a href="https://blog.torproject.org/blog/start-tor-legal-support-directory"> legal directory</a> of people who may be able to help you.

1 0

[webwml/staging] Bug 27151: Add TBB-alpha locales ca, ga-IE, id, is, nb-NO
by hiro＠torproject.org 27 Aug '18

27 Aug '18

commit 199bde6b63257182d8e62f2ebf12b44a6c06a7ce Author: Arthur Edelstein <arthuredelstein(a)gmail.com> Date: Fri Aug 17 02:04:29 2018 -0400 Bug 27151: Add TBB-alpha locales ca, ga-IE, id, is, nb-NO --- projects/en/torbrowser.wml | 90 ++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 90 insertions(+) diff --git a/projects/en/torbrowser.wml b/projects/en/torbrowser.wml index 27000d11..91cc778c 100644 --- a/projects/en/torbrowser.wml +++ b/projects/en/torbrowser.wml @@ -362,6 +362,24 @@ • <a href="../dist/torbrowser/<version-torbrowserbundlelinux64beta>/tor-browser-linux64-<version-torbrowserbundlelinux64beta>_ar.tar.xz">64-bit</a> (<a href="../dist/torbrowser/<version-torbrowserbundlelinux64beta>/tor-browser-linux64-<version-torbrowserbundlelinux64beta>_ar.tar.xz.asc">sig</a>)</td> </tr> + <tr class="alt"> + <td>Català (ca)</td> + <td> + <a href="../dist/torbrowser/<version-torbrowserbundlebeta>/torbrowser-install-<version-torbrowserbundlebeta>_ca.exe">32/64-bit</a> + (<a href="../dist/torbrowser/<version-torbrowserbundlebeta>/torbrowser-install-<version-torbrowserbundlebeta>_ca.exe.asc">sig</a>) + • + <a href="../dist/torbrowser/<version-torbrowserbundlewin64beta>/torbrowser-install-win64-<version-torbrowserbundlewin64beta>_ca.exe">64-bit</a> + (<a href="../dist/torbrowser/<version-torbrowserbundlewin64beta>/torbrowser-install-win64-<version-torbrowserbundlewin64beta>_ca.exe.asc">sig</a>) + </td> + <td><a href="../dist/torbrowser/<version-torbrowserbundleosx64beta>/TorBrowser-<version-torbrowserbundleosx64beta>-osx64_ca.dmg">64-bit</a> + (<a href="../dist/torbrowser/<version-torbrowserbundleosx64beta>/TorBrowser-<version-torbrowserbundleosx64beta>-osx64_ca.dmg.asc">sig</a>) +  + <td><a href="../dist/torbrowser/<version-torbrowserbundlelinux32beta>/tor-browser-linux32-<version-torbrowserbundlelinux32beta>_ca.tar.xz">32-bit</a> + (<a href="../dist/torbrowser/<version-torbrowserbundlelinux32beta>/tor-browser-linux32-<version-torbrowserbundlelinux32beta>_ca.tar.xz.asc">sig</a>) + • <a href="../dist/torbrowser/<version-torbrowserbundlelinux64beta>/tor-browser-linux64-<version-torbrowserbundlelinux64beta>_ca.tar.xz">64-bit</a> + (<a href="../dist/torbrowser/<version-torbrowserbundlelinux64beta>/tor-browser-linux64-<version-torbrowserbundlelinux64beta>_ca.tar.xz.asc">sig</a>)</td> + </tr> <tr> <td>Dansk (da)</td> <td> @@ -452,6 +470,24 @@ • <a href="../dist/torbrowser/<version-torbrowserbundlelinux64beta>/tor-browser-linux64-<version-torbrowserbundlelinux64beta>_fr.tar.xz">64-bit</a> (<a href="../dist/torbrowser/<version-torbrowserbundlelinux64beta>/tor-browser-linux64-<version-torbrowserbundlelinux64beta>_fr.tar.xz.asc">sig</a>)</td> </tr> + <tr class="alt"> + <td>Gaeilge (Irish) (ga-IE)</td> + <td> + <a href="../dist/torbrowser/<version-torbrowserbundlebeta>/torbrowser-install-<version-torbrowserbundlebeta>_ga-IE.exe">32/64-bit</a> + (<a href="../dist/torbrowser/<version-torbrowserbundlebeta>/torbrowser-install-<version-torbrowserbundlebeta>_ga-IE.exe.asc">sig</a>) + • + <a href="../dist/torbrowser/<version-torbrowserbundlewin64beta>/torbrowser-install-win64-<version-torbrowserbundlewin64beta>_ga-IE.exe">64-bit</a> + (<a href="../dist/torbrowser/<version-torbrowserbundlewin64beta>/torbrowser-install-win64-<version-torbrowserbundlewin64beta>_ga-IE.exe.asc">sig</a>) + </td> + <td><a href="../dist/torbrowser/<version-torbrowserbundleosx64beta>/TorBrowser-<version-torbrowserbundleosx64beta>-osx64_ga-IE.dmg">64-bit</a> + (<a href="../dist/torbrowser/<version-torbrowserbundleosx64beta>/TorBrowser-<version-torbrowserbundleosx64beta>-osx64_ga-IE.dmg.asc">sig</a>) +  + <td><a href="../dist/torbrowser/<version-torbrowserbundlelinux32beta>/tor-browser-linux32-<version-torbrowserbundlelinux32beta>_ga-IE.tar.xz">32-bit</a> + (<a href="../dist/torbrowser/<version-torbrowserbundlelinux32beta>/tor-browser-linux32-<version-torbrowserbundlelinux32beta>_ga-IE.tar.xz.asc">sig</a>) + • <a href="../dist/torbrowser/<version-torbrowserbundlelinux64beta>/tor-browser-linux64-<version-torbrowserbundlelinux64beta>_ga-IE.tar.xz">64-bit</a> + (<a href="../dist/torbrowser/<version-torbrowserbundlelinux64beta>/tor-browser-linux64-<version-torbrowserbundlelinux64beta>_ga-IE.tar.xz.asc">sig</a>)</td> + </tr> <tr> <td>עברית (he)</td> <td> @@ -470,6 +506,42 @@ • <a href="../dist/torbrowser/<version-torbrowserbundlelinux64beta>/tor-browser-linux64-<version-torbrowserbundlelinux64beta>_he.tar.xz">64-bit</a> (<a href="../dist/torbrowser/<version-torbrowserbundlelinux64beta>/tor-browser-linux64-<version-torbrowserbundlelinux64beta>_he.tar.xz.asc">sig</a>)</td> </tr> + <tr class="alt"> + <td>bahasa Indonesia (id)</td> + <td> + <a href="../dist/torbrowser/<version-torbrowserbundlebeta>/torbrowser-install-<version-torbrowserbundlebeta>_id.exe">32/64-bit</a> + (<a href="../dist/torbrowser/<version-torbrowserbundlebeta>/torbrowser-install-<version-torbrowserbundlebeta>_id.exe.asc">sig</a>) + • + <a href="../dist/torbrowser/<version-torbrowserbundlewin64beta>/torbrowser-install-win64-<version-torbrowserbundlewin64beta>_id.exe">64-bit</a> + (<a href="../dist/torbrowser/<version-torbrowserbundlewin64beta>/torbrowser-install-win64-<version-torbrowserbundlewin64beta>_id.exe.asc">sig</a>) + </td> + <td><a href="../dist/torbrowser/<version-torbrowserbundleosx64beta>/TorBrowser-<version-torbrowserbundleosx64beta>-osx64_id.dmg">64-bit</a> + (<a href="../dist/torbrowser/<version-torbrowserbundleosx64beta>/TorBrowser-<version-torbrowserbundleosx64beta>-osx64_id.dmg.asc">sig</a>) +  + <td><a href="../dist/torbrowser/<version-torbrowserbundlelinux32beta>/tor-browser-linux32-<version-torbrowserbundlelinux32beta>_id.tar.xz">32-bit</a> + (<a href="../dist/torbrowser/<version-torbrowserbundlelinux32beta>/tor-browser-linux32-<version-torbrowserbundlelinux32beta>_id.tar.xz.asc">sig</a>) + • <a href="../dist/torbrowser/<version-torbrowserbundlelinux64beta>/tor-browser-linux64-<version-torbrowserbundlelinux64beta>_id.tar.xz">64-bit</a> + (<a href="../dist/torbrowser/<version-torbrowserbundlelinux64beta>/tor-browser-linux64-<version-torbrowserbundlelinux64beta>_id.tar.xz.asc">sig</a>)</td> + </tr> + <tr class="alt"> + <td>íslenska (is)</td> + <td> + <a href="../dist/torbrowser/<version-torbrowserbundlebeta>/torbrowser-install-<version-torbrowserbundlebeta>_is.exe">32/64-bit</a> + (<a href="../dist/torbrowser/<version-torbrowserbundlebeta>/torbrowser-install-<version-torbrowserbundlebeta>_is.exe.asc">sig</a>) + • + <a href="../dist/torbrowser/<version-torbrowserbundlewin64beta>/torbrowser-install-win64-<version-torbrowserbundlewin64beta>_is.exe">64-bit</a> + (<a href="../dist/torbrowser/<version-torbrowserbundlewin64beta>/torbrowser-install-win64-<version-torbrowserbundlewin64beta>_is.exe.asc">sig</a>) + </td> + <td><a href="../dist/torbrowser/<version-torbrowserbundleosx64beta>/TorBrowser-<version-torbrowserbundleosx64beta>-osx64_is.dmg">64-bit</a> + (<a href="../dist/torbrowser/<version-torbrowserbundleosx64beta>/TorBrowser-<version-torbrowserbundleosx64beta>-osx64_is.dmg.asc">sig</a>) +  + <td><a href="../dist/torbrowser/<version-torbrowserbundlelinux32beta>/tor-browser-linux32-<version-torbrowserbundlelinux32beta>_is.tar.xz">32-bit</a> + (<a href="../dist/torbrowser/<version-torbrowserbundlelinux32beta>/tor-browser-linux32-<version-torbrowserbundlelinux32beta>_is.tar.xz.asc">sig</a>) + • <a href="../dist/torbrowser/<version-torbrowserbundlelinux64beta>/tor-browser-linux64-<version-torbrowserbundlelinux64beta>_is.tar.xz">64-bit</a> + (<a href="../dist/torbrowser/<version-torbrowserbundlelinux64beta>/tor-browser-linux64-<version-torbrowserbundlelinux64beta>_is.tar.xz.asc">sig</a>)</td> + </tr> <tr> <td>Italiano (it)</td> <td> @@ -525,6 +597,24 @@ (<a href="../dist/torbrowser/<version-torbrowserbundlelinux64beta>/tor-browser-linux64-<version-torbrowserbundlelinux64beta>_ko.tar.xz.asc">sig</a>)</td> </tr> <tr class="alt"> + <td>Norsk bokmåͅl (nb)</td> + <td> + <a href="../dist/torbrowser/<version-torbrowserbundlebeta>/torbrowser-install-<version-torbrowserbundlebeta>_nb-NO.exe">32/64-bit</a> + (<a href="../dist/torbrowser/<version-torbrowserbundlebeta>/torbrowser-install-<version-torbrowserbundlebeta>_nb-NO.exe.asc">sig</a>) + • + <a href="../dist/torbrowser/<version-torbrowserbundlewin64beta>/torbrowser-install-win64-<version-torbrowserbundlewin64beta>_nb-NO.exe">64-bit</a> + (<a href="../dist/torbrowser/<version-torbrowserbundlewin64beta>/torbrowser-install-win64-<version-torbrowserbundlewin64beta>_nb-NO.exe.asc">sig</a>) + </td> + <td><a href="../dist/torbrowser/<version-torbrowserbundleosx64beta>/TorBrowser-<version-torbrowserbundleosx64beta>-osx64_nb-NO.dmg">64-bit</a> + (<a href="../dist/torbrowser/<version-torbrowserbundleosx64beta>/TorBrowser-<version-torbrowserbundleosx64beta>-osx64_nb-NO.dmg.asc">sig</a>) +  + <td><a href="../dist/torbrowser/<version-torbrowserbundlelinux32beta>/tor-browser-linux32-<version-torbrowserbundlelinux32beta>_nb-NO.tar.xz">32-bit</a> + (<a href="../dist/torbrowser/<version-torbrowserbundlelinux32beta>/tor-browser-linux32-<version-torbrowserbundlelinux32beta>_nb-NO.tar.xz.asc">sig</a>) + • <a href="../dist/torbrowser/<version-torbrowserbundlelinux64beta>/tor-browser-linux64-<version-torbrowserbundlelinux64beta>_nb-NO.tar.xz">64-bit</a> + (<a href="../dist/torbrowser/<version-torbrowserbundlelinux64beta>/tor-browser-linux64-<version-torbrowserbundlelinux64beta>_nb-NO.tar.xz.asc">sig</a>)</td> + </tr> + <tr class="alt"> <td>Nederlands (nl)</td> <td> <a href="../dist/torbrowser/<version-torbrowserbundlebeta>/torbrowser-install-<version-torbrowserbundlebeta>_nl.exe">32/64-bit</a>

1 0