June 2020 - tor-commits - lists.torproject.org

[manual/master] Adding @PROTechThor section about onion service authentication
by gus＠torproject.org 02 Jun '20

02 Jun '20

commit a46d2ba32dc6c9a8cb1d50c2a8a16317de977ba7 Author: gus <gus(a)torproject.org> Date: Tue May 26 14:12:44 2020 -0400 Adding @PROTechThor section about onion service authentication --- content/onion-services/contents.lr | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/content/onion-services/contents.lr b/content/onion-services/contents.lr index be2ab9c..cfb99a8 100644 --- a/content/onion-services/contents.lr +++ b/content/onion-services/contents.lr @@ -30,6 +30,16 @@ Click on hamburger menu (≡), go to Preferences (or Options in Windows), click Or if you're already running Tor Browser, you can click directly here: [Privacy & Security](about:preferences#privacy). When accessing a website that uses an onion service, Tor Browser will show at the URL bar an icon of a little black onion displaying the state of your connection: secure and using an onion service. And if you're accessing a website using https and onion service, it will show an icon of a black onion and the organization's name. You can learn more about the onionsite you are visiting by looking at the Circuit Display. +## Onion service authentication + +An authenticated onion service is a service like an onionsite that requires the client to provide an authentication token before accessing the service. +As a Tor user, you may authenticate yourself directly in the Tor Browser. +In order to access this service, you will need access credentials from the onion service operator. +When accessing an authenticated onion service, Tor Browser will show at the URL bar an icon of a little gray key, accompanied by a tooltip. +Enter your valid private key into the input field. + +<img class="col-md-6" src="../../static/images/client-auth-prompt.png" alt="Client Authorization"> + ### TROUBLESHOOTING If you cannot reach the onion service you require, make sure that you have entered the onion address correctly: even a small mistake will stop Tor Browser from being able to reach the site.

1 0

[manual/master] Add onion-location and new onion icons
by gus＠torproject.org 02 Jun '20

02 Jun '20

commit 98a165e433d6d6a40f3bca834bf36695e4a88ed7 Author: gus <gus(a)torproject.org> Date: Tue May 26 14:01:37 2020 -0400 Add onion-location and new onion icons --- content/onion-services/contents.lr | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/content/onion-services/contents.lr b/content/onion-services/contents.lr index 7f15915..be2ab9c 100644 --- a/content/onion-services/contents.lr +++ b/content/onion-services/contents.lr @@ -21,8 +21,14 @@ Onion services offer several advantages over ordinary services on the non-privat ### HOW TO ACCESS AN ONION SERVICE Just like any other website, you will need to know the address of an onion service in order to connect to it. An onion address is a string of 16 (and in V3 format, 56) mostly random letters and numbers, followed by “.onion”. - -When accessing a website that uses an onion service, Tor Browser will show at the URL bar an icon of a little green onion displaying the state of your connection: secure and using an onion service. And if you're accessing a website with https and onion service, it will show an icon of a green onion and a padlock. +It's also possible to learn about an onionsite if the website administrator has advertised the onion version by enabling Onion-Location. +Onion-Location is a new HTTP header that websites can use to advertise their onion counterpart. +If the website that you're visiting has an onionsite available, a purple suggestion pill will prompt at the URL bar saying ".onion available". +When you click on ".onion available", the website will be reloaded and redirected to its onion counterpart. +To prioritize an onionsite version of a website, you can enable automatic Onion-Location redirects. +Click on hamburger menu (≡), go to Preferences (or Options in Windows), click on Privacy & Security, and in Onion Services section check the option "Always". +Or if you're already running Tor Browser, you can click directly here: [Privacy & Security](about:preferences#privacy). +When accessing a website that uses an onion service, Tor Browser will show at the URL bar an icon of a little black onion displaying the state of your connection: secure and using an onion service. And if you're accessing a website using https and onion service, it will show an icon of a black onion and the organization's name. You can learn more about the onionsite you are visiting by looking at the Circuit Display. ### TROUBLESHOOTING

1 0

[manual/master] Add new client auth img
by gus＠torproject.org 02 Jun '20

02 Jun '20

commit ce61dfa573f550d3884d20d0b9a058fe03271aa4 Author: gus <gus(a)torproject.org> Date: Tue May 26 15:44:51 2020 -0400 Add new client auth img --- assets/static/images/client-auth.png | Bin 0 -> 14703 bytes content/onion-services/contents.lr | 2 +- 2 files changed, 1 insertion(+), 1 deletion(-) diff --git a/assets/static/images/client-auth.png b/assets/static/images/client-auth.png new file mode 100644 index 0000000..5e1c5ce Binary files /dev/null and b/assets/static/images/client-auth.png differ diff --git a/content/onion-services/contents.lr b/content/onion-services/contents.lr index cfb99a8..109f876 100644 --- a/content/onion-services/contents.lr +++ b/content/onion-services/contents.lr @@ -38,7 +38,7 @@ In order to access this service, you will need access credentials from the onion When accessing an authenticated onion service, Tor Browser will show at the URL bar an icon of a little gray key, accompanied by a tooltip. Enter your valid private key into the input field. -<img class="col-md-6" src="../../static/images/client-auth-prompt.png" alt="Client Authorization"> +<img class="col-md-6" src="../../static/images/client-auth.png" alt="Client Authorization"> ### TROUBLESHOOTING

1 0

[manual/master] Update screenshot with Onion icon
by gus＠torproject.org 02 Jun '20

02 Jun '20

commit ce076bbf88324b7675e9e43f32b8fac9485a1f05 Author: gus <gus(a)torproject.org> Date: Fri May 29 00:35:35 2020 -0400 Update screenshot with Onion icon --- assets/static/images/circuit_full.png | Bin 39012 -> 29854 bytes 1 file changed, 0 insertions(+), 0 deletions(-) diff --git a/assets/static/images/circuit_full.png b/assets/static/images/circuit_full.png index 291a419..2d600e0 100644 Binary files a/assets/static/images/circuit_full.png and b/assets/static/images/circuit_full.png differ

1 0

[manual/master] Add Onion-Location screenshot
by gus＠torproject.org 02 Jun '20

02 Jun '20

commit f37b651c5f3174b1ca89e4df3a75adcbc08ddc94 Author: gus <gus(a)torproject.org> Date: Fri May 29 00:36:01 2020 -0400 Add Onion-Location screenshot --- assets/static/images/onion-location.png | Bin 0 -> 10249 bytes 1 file changed, 0 insertions(+), 0 deletions(-) diff --git a/assets/static/images/onion-location.png b/assets/static/images/onion-location.png new file mode 100644 index 0000000..3e758d6 Binary files /dev/null and b/assets/static/images/onion-location.png differ

1 0

[manual/master] Add onion errors, acat suggestions, fix grammar
by gus＠torproject.org 02 Jun '20

02 Jun '20

commit cd3417ceeb532a63dd8116789923c4ac8ae81141 Author: gus <gus(a)torproject.org> Date: Fri May 29 00:36:52 2020 -0400 Add onion errors, acat suggestions, fix grammar --- content/onion-services/contents.lr | 51 +++++++++++++++++++++++++++----------- 1 file changed, 37 insertions(+), 14 deletions(-) diff --git a/content/onion-services/contents.lr b/content/onion-services/contents.lr index 109f876..472b192 100644 --- a/content/onion-services/contents.lr +++ b/content/onion-services/contents.lr @@ -10,40 +10,63 @@ key: 9 --- body: -Onion services (formerly known as “hidden services”) are services (like websites) that are only accessible through the Tor network. +Onion services (formerly known as "hidden services") are services (like websites) that are only accessible through the Tor network. Onion services offer several advantages over ordinary services on the non-private web: -* An onion services’s location and IP address are hidden, making it difficult for adversaries to censor it or identify its operators. +* Onion services’ location and IP address are hidden, making it difficult for adversaries to censor them or identify their operators. * All traffic between Tor users and onion services is end-to-end encrypted, so you do not need to worry about [connecting over HTTPS](/secure-connections). * The address of an onion service is automatically generated, so the operators do not need to purchase a domain name; the .onion URL also helps Tor ensure that it is connecting to the right location and that the connection is not being tampered with. ### HOW TO ACCESS AN ONION SERVICE -Just like any other website, you will need to know the address of an onion service in order to connect to it. An onion address is a string of 16 (and in V3 format, 56) mostly random letters and numbers, followed by “.onion”. -It's also possible to learn about an onionsite if the website administrator has advertised the onion version by enabling Onion-Location. -Onion-Location is a new HTTP header that websites can use to advertise their onion counterpart. -If the website that you're visiting has an onionsite available, a purple suggestion pill will prompt at the URL bar saying ".onion available". +Just like any other website, you will need to know the address of an onion service in order to connect to it. An onion address is a string of 16 (and in V3 format, 56) mostly random letters and numbers, followed by ".onion". + +When accessing a website that uses an onion service, Tor Browser will show in the URL bar an icon of an onion displaying the state of your connection: secure and using an onion service. You can learn more about the onionsite that you are visiting by looking at the Circuit Display. + +Another way to learn about an onionsite is if the website administrator has implemented a feature called Onion-Location. +Onion-Location is a non-standard HTTP header that websites can use to advertise their onion counterpart. +If the website that you are visiting has an onionsite available, a purple suggestion pill will prompt at the URL bar in Tor Browser displaying ".onion available". When you click on ".onion available", the website will be reloaded and redirected to its onion counterpart. + +<img class="col-md-6" src="../../static/images/onion-location.png" alt="Onion-Location"> + To prioritize an onionsite version of a website, you can enable automatic Onion-Location redirects. -Click on hamburger menu (≡), go to Preferences (or Options in Windows), click on Privacy & Security, and in Onion Services section check the option "Always". -Or if you're already running Tor Browser, you can click directly here: [Privacy & Security](about:preferences#privacy). -When accessing a website that uses an onion service, Tor Browser will show at the URL bar an icon of a little black onion displaying the state of your connection: secure and using an onion service. And if you're accessing a website using https and onion service, it will show an icon of a black onion and the organization's name. You can learn more about the onionsite you are visiting by looking at the Circuit Display. +Click on hamburger menu (≡), go to Preferences (or Options on Windows), click on Privacy & Security, and in the Onion Services section look for the entry "Prioritize .onion sites when known." and check the option "Always". +Or, if you're already running Tor Browser, you can copy and paste this string in a new tab: `about:preferences#privacy` and change this setting. -## Onion service authentication +## ONION SERVICE AUTHENTICATION An authenticated onion service is a service like an onionsite that requires the client to provide an authentication token before accessing the service. As a Tor user, you may authenticate yourself directly in the Tor Browser. In order to access this service, you will need access credentials from the onion service operator. -When accessing an authenticated onion service, Tor Browser will show at the URL bar an icon of a little gray key, accompanied by a tooltip. +When accessing an authenticated onion service, Tor Browser will show in the URL bar an icon of a little gray key, accompanied by a tooltip. Enter your valid private key into the input field. <img class="col-md-6" src="../../static/images/client-auth.png" alt="Client Authorization"> +### ONION SERVICES ERRORS + +If you can't connect to an onionsite, Tor Browser will provide a specific error message informing why the website is unavailable. +Errors can happen in different layers: client errors, network errors or service errors. +Some of these errors can be fixed by following the Troubleshooting section. +The table below shows all the possible errors and which action you should take to solve the issue. + +| **Code** | **Error Title** | **Short Description** | +|----------|-----------------|-----------------------| +| XF0 | Onionsite Not Found | The most likely cause is that the onionsite is offline or disabled. Contact the onionsite administrator. | +| XF1 | Onionsite Cannot Be Reached | The onionsite is unreachable due to an internal error. | +| XF2 | Onionsite Has Disconnected | The most likely cause is that the onionsite is offline or disabled. Contact the onionsite administrator. | +| XF3 | Unable to Connect to Onionsite | The onionsite is busy or the Tor network is overloaded. Try again later. | +| XF4 | Onionsite Requires Authentication | Access to the onionsite requires a key but none was provided. | +| XF5 | Onionsite Authentication Failed | The provided key is incorrect or has been revoked. Contact the onionsite administrator. | +| XF6 | Invalid Onionsite Address | The provided onionsite address is invalid. Please check that you entered it correctly. | +| XF7 | Onionsite Circuit Creation Timed Out | Failed to connect to the onionsite, possibly due to a poor network connection. | + ### TROUBLESHOOTING -If you cannot reach the onion service you require, make sure that you have entered the onion address correctly: even a small mistake will stop Tor Browser from being able to reach the site. +If you cannot reach the onion service you requested, make sure that you have entered the onion address correctly: even a small mistake will stop Tor Browser from being able to reach the site. -If you are still unable to connect to the onion service, please try again later. There may be a temporary connection issue, or the site operators may have allowed it to go offline without warning. +If you are still unable to connect to the onion service after verifying the address, please try again later. There may be a temporary connection issue, or the site operators may have allowed it to go offline without warning. -You can also ensure that you're able to access other onion services by connecting to [DuckDuckGo's Onion Service](http://3g2upl4pq6kufc4m.onion/). +You can also test if you are able to access other onion services by connecting to [DuckDuckGo's Onion Service](http://3g2upl4pq6kufc4m.onion/).

1 0

[manual/master] Change onionsite to onion site
by gus＠torproject.org 02 Jun '20

02 Jun '20

commit eccc4cb64be787eaf4bff914d7bea8fef0ba13df Author: gus <gus(a)torproject.org> Date: Tue Jun 2 11:38:55 2020 -0400 Change onionsite to onion site --- content/onion-services/contents.lr | 28 ++++++++++++++-------------- 1 file changed, 14 insertions(+), 14 deletions(-) diff --git a/content/onion-services/contents.lr b/content/onion-services/contents.lr index 472b192..ee0d71f 100644 --- a/content/onion-services/contents.lr +++ b/content/onion-services/contents.lr @@ -22,22 +22,22 @@ Onion services offer several advantages over ordinary services on the non-privat Just like any other website, you will need to know the address of an onion service in order to connect to it. An onion address is a string of 16 (and in V3 format, 56) mostly random letters and numbers, followed by ".onion". -When accessing a website that uses an onion service, Tor Browser will show in the URL bar an icon of an onion displaying the state of your connection: secure and using an onion service. You can learn more about the onionsite that you are visiting by looking at the Circuit Display. +When accessing a website that uses an onion service, Tor Browser will show in the URL bar an icon of an onion displaying the state of your connection: secure and using an onion service. You can learn more about the onion site that you are visiting by looking at the Circuit Display. -Another way to learn about an onionsite is if the website administrator has implemented a feature called Onion-Location. +Another way to learn about an onion site is if the website administrator has implemented a feature called Onion-Location. Onion-Location is a non-standard HTTP header that websites can use to advertise their onion counterpart. -If the website that you are visiting has an onionsite available, a purple suggestion pill will prompt at the URL bar in Tor Browser displaying ".onion available". +If the website that you are visiting has an onion site available, a purple suggestion pill will prompt at the URL bar in Tor Browser displaying ".onion available". When you click on ".onion available", the website will be reloaded and redirected to its onion counterpart. <img class="col-md-6" src="../../static/images/onion-location.png" alt="Onion-Location"> -To prioritize an onionsite version of a website, you can enable automatic Onion-Location redirects. +To prioritize an onion site version of a website, you can enable automatic Onion-Location redirects. Click on hamburger menu (≡), go to Preferences (or Options on Windows), click on Privacy & Security, and in the Onion Services section look for the entry "Prioritize .onion sites when known." and check the option "Always". Or, if you're already running Tor Browser, you can copy and paste this string in a new tab: `about:preferences#privacy` and change this setting. ## ONION SERVICE AUTHENTICATION -An authenticated onion service is a service like an onionsite that requires the client to provide an authentication token before accessing the service. +An authenticated onion service is a service like an onion site that requires the client to provide an authentication token before accessing the service. As a Tor user, you may authenticate yourself directly in the Tor Browser. In order to access this service, you will need access credentials from the onion service operator. When accessing an authenticated onion service, Tor Browser will show in the URL bar an icon of a little gray key, accompanied by a tooltip. @@ -47,21 +47,21 @@ Enter your valid private key into the input field. ### ONION SERVICES ERRORS -If you can't connect to an onionsite, Tor Browser will provide a specific error message informing why the website is unavailable. +If you can't connect to an onion site, Tor Browser will provide a specific error message informing why the website is unavailable. Errors can happen in different layers: client errors, network errors or service errors. Some of these errors can be fixed by following the Troubleshooting section. The table below shows all the possible errors and which action you should take to solve the issue. | **Code** | **Error Title** | **Short Description** | |----------|-----------------|-----------------------| -| XF0 | Onionsite Not Found | The most likely cause is that the onionsite is offline or disabled. Contact the onionsite administrator. | -| XF1 | Onionsite Cannot Be Reached | The onionsite is unreachable due to an internal error. | -| XF2 | Onionsite Has Disconnected | The most likely cause is that the onionsite is offline or disabled. Contact the onionsite administrator. | -| XF3 | Unable to Connect to Onionsite | The onionsite is busy or the Tor network is overloaded. Try again later. | -| XF4 | Onionsite Requires Authentication | Access to the onionsite requires a key but none was provided. | -| XF5 | Onionsite Authentication Failed | The provided key is incorrect or has been revoked. Contact the onionsite administrator. | -| XF6 | Invalid Onionsite Address | The provided onionsite address is invalid. Please check that you entered it correctly. | -| XF7 | Onionsite Circuit Creation Timed Out | Failed to connect to the onionsite, possibly due to a poor network connection. | +| XF0 | Onion site Not Found | The most likely cause is that the onion site is offline or disabled. Contact the onion site administrator. | +| XF1 | Onion site Cannot Be Reached | The onion site is unreachable due to an internal error. | +| XF2 | Onion site Has Disconnected | The most likely cause is that the onion site is offline or disabled. Contact the onion site administrator. | +| XF3 | Unable to Connect to Onionsite | The onion site is busy or the Tor network is overloaded. Try again later. | +| XF4 | Onion site Requires Authentication | Access to the onion site requires a key but none was provided. | +| XF5 | Onion site Authentication Failed | The provided key is incorrect or has been revoked. Contact the onion site administrator. | +| XF6 | Invalid Onionsite Address | The provided onion site address is invalid. Please check that you entered it correctly. | +| XF7 | Onion site Circuit Creation Timed Out | Failed to connect to the onion site, possibly due to a poor network connection. | ### TROUBLESHOOTING

1 0

[translation/tpo-web] https://gitweb.torproject.org/translation.git/commit/?h=tpo-web
by translation＠torproject.org 02 Jun '20

02 Jun '20

commit 85bd4410762fa3cb4691f04b886e5202d35831f8 Author: Translation commit bot <translation(a)torproject.org> Date: Tue Jun 2 14:53:55 2020 +0000 https://gitweb.torproject.org/translation.git/commit/?h=tpo-web --- contents+mr.po | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/contents+mr.po b/contents+mr.po index 122eff9f44..234ca7d396 100644 --- a/contents+mr.po +++ b/contents+mr.po @@ -80,7 +80,7 @@ msgstr "" #: https//www.torproject.org/download/tor/ #: (content/download/tor/contents+en.lrpage.section) msgid "Download" -msgstr "" +msgstr "डाउनलोड " #: https//www.torproject.org/menu/ (content/menu/contents+en.lrpage.title) msgid "Sponsors"

1 0

[tpo/master] Add new Tor Browser version 9.5
by sysrqb＠torproject.org 02 Jun '20

02 Jun '20

commit 5efd184c49370354f3a8f78aa14989dedd14f373 Author: Matthew Finkel <sysrqb(a)torproject.org> Date: Mon Jun 1 21:15:04 2020 +0000 Add new Tor Browser version 9.5 --- content/projects/torbrowser/RecommendedTBBVersions/contents.lr | 4 ++++ databags/versions.ini | 4 ++-- 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/content/projects/torbrowser/RecommendedTBBVersions/contents.lr b/content/projects/torbrowser/RecommendedTBBVersions/contents.lr index 10c7c2b9..14be9d11 100644 --- a/content/projects/torbrowser/RecommendedTBBVersions/contents.lr +++ b/content/projects/torbrowser/RecommendedTBBVersions/contents.lr @@ -9,6 +9,10 @@ body: "9.0.10-MacOS", "9.0.10-Linux", "9.0.10-Windows", +"9.5", +"9.5-MacOS", +"9.5-Linux", +"9.5-Windows", "9.5a12", "9.5a12-MacOS", "9.5a12-Linux", diff --git a/databags/versions.ini b/databags/versions.ini index ecb10870..567e1df7 100644 --- a/databags/versions.ini +++ b/databags/versions.ini @@ -1,6 +1,6 @@ [torbrowser-stable] -version = 9.0.10 -win32 = 0.4.2.7 +version = 9.5 +win32 = 0.4.3.5 [torbrowser-alpha] version = 9.5a13

1 0

[tpo/master] Update support callout
by antonela＠torproject.org 02 Jun '20

02 Jun '20

commit b56a96641deb04633481d65bc792b3797a89e5ea Author: Antonela <hola(a)antonela.me> Date: Tue Jun 2 11:31:43 2020 -0300 Update support callout - add target_blank - remove unused styles --- templates/release.html | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/templates/release.html b/templates/release.html index 1671cb60..4f47b773 100644 --- a/templates/release.html +++ b/templates/release.html @@ -18,21 +18,21 @@ <div class="col-sm-3"> - <div class="card-body h-100% w-50% text-center border"> + <div class="card-body text-center border"> <h4 class="text-primary">{{ _("Do you need help?") }}</h4> <i class="fas fa-life-ring h1 text-primary mx-auto"></i> - <div class=" pt-2" style="text-align: center;"> + <div class="pt-2"> <p class="toc-entry toc-h2 nav-item mb-0" >{{ ("See our community FAQ's") }}</p> - <a href="https://support.torproject.org" class="pt-1">{{ ("Visit Support") }}</a> + <a href="https://support.torproject.org" target="_blank" class="pt-1">{{ ("Visit Support") }}</a> </div> </div> - <div class="card-body h-100% w-50% text-center mt-4" style="background:#F2ECF4;"> + <div class="card-body text-center mt-4" style="background:#F2ECF4;"> <h4 class="text-primary">{{ _("Get in Touch") }}</h4> <i class="fas fa-comments h1 text-primary mx-auto"></i> - <div class=" pt-2" style="text-align: center;"> + <div class=" pt-2"> <p class="toc-entry toc-h2 nav-item mb-0" >{{ ("Chat with us live!") }}</p> - <a href="https://webchat.oftc.net/?channels=tor" class="pt-1">{{ ("Join us on IRC") }}</a> + <a href="https://webchat.oftc.net/?channels=tor" target="_blank" class="pt-1">{{ ("Join us on IRC") }}</a> </div> </div> @@ -55,7 +55,7 @@ </div> </div> </div> - + {% if this.section == "Download" %} {% include 'footer-min.html' %} {% else %}

1 0