June 2020 - tor-commits - lists.torproject.org

[community/master] Move some advanced tips and references to a new section
by gus＠torproject.org 01 Jun '20

01 Jun '20

commit f8e411b13c4c412c923513c58f94f35857e2ccda Author: gus <gus(a)torproject.org> Date: Wed May 27 23:36:12 2020 -0400 Move some advanced tips and references to a new section --- content/onion-services/setup/contents.lr | 25 ++++++++++++++++--------- 1 file changed, 16 insertions(+), 9 deletions(-) diff --git a/content/onion-services/setup/contents.lr b/content/onion-services/setup/contents.lr index 7b46041..464596f 100644 --- a/content/onion-services/setup/contents.lr +++ b/content/onion-services/setup/contents.lr @@ -75,14 +75,21 @@ If your keys leak, other people can impersonate your onion service, deeming it c Now you can connect to your onion service using Tor Browser, and you should get the html page you setup back in step 1. If it doesn't work, look in your logs for some hints, and keep playing with it until it works. -## Step 5: More advanced tips +## Step 5: More tips -The above guide is just a baseline to setup an onion service. -In this section we will offer more resources to better configure and protect your onion service: +If you plan to keep your service available for a long time, you might want to make a backup copy of the `private_key` file somewhere. -- Best practices for onion services -https://riseup.net/en/security/network-security/tor/onionservices-best-practices -- More advanced tips for onion services -https://2019.www.torproject.org/docs/tor-onion-service.html.en#three -- Advanced onion service security -https://blog.torproject.org/announcing-vanguards-add-onion-services +If you want to forward multiple virtual ports for a single onion service, just add more `HiddenServicePort` lines. If you want to run multiple onion services from the same Tor client, just add another `HiddenServiceDir` line. All the following `HiddenServicePort` lines refer to this `HiddenServiceDir` line, until you add another `HiddenServiceDir` line: + + HiddenServiceDir /usr/local/etc/tor/hidden_service/ + HiddenServicePort 80 127.0.0.1:8080 + + HiddenServiceDir /usr/local/etc/tor/other_hidden_service/ + HiddenServicePort 6667 127.0.0.1:6667 + HiddenServicePort 22 127.0.0.1:22 + + +You can use [stem](https://stem.torproject.org/) to [automate the management of your onion services](https://stem.torproject.org/tutorials/over_the_river.html). + + * To set up an Onion Service on Raspbian have a look at Alec Muffett's [Enterprise Onion Toolkit](https://github.com/alecmuffett/eotk). + * [Onion services best practices](https://riseup.net/en/security/network-security/tor/onionservice… by Riseup Collective.

1 0

[community/master] Add nginx Onion-Location instructions, thanks @ahf
by gus＠torproject.org 01 Jun '20

01 Jun '20

commit 3f25f456fd19796d5e4411e9cd8e3dc012927874 Author: gus <gus(a)torproject.org> Date: Mon Jun 1 13:40:14 2020 -0400 Add nginx Onion-Location instructions, thanks @ahf --- .../advanced/onion-location/contents.lr | 78 +++++++++++++++------- 1 file changed, 54 insertions(+), 24 deletions(-) diff --git a/content/onion-services/advanced/onion-location/contents.lr b/content/onion-services/advanced/onion-location/contents.lr index caf7d5f..4796554 100644 --- a/content/onion-services/advanced/onion-location/contents.lr +++ b/content/onion-services/advanced/onion-location/contents.lr @@ -25,18 +25,18 @@ For the header to be valid the following conditions need to be fulfilled: * The webpage defining the Onion-Location header must be served over HTTPS. * The webpage defining the Onion-Location header must not be an onionsite. -In this page, the commands to restart the web server are based on Debian-like operating systems and may differ on other systems. +In this page, the commands to manage the web server are based on Debian-like operating systems and may differ on other systems. Check your web server and operating system documentation. ### Apache -To configure this header in Apache 2.2 or above, you will need to enable a few modules and edit the website Virtual Host file. +To configure this header in Apache 2.2 or above, you will need to enable a `headers` and `rewrite` modules and edit the website Virtual Host file. -**Step 1.** Enable headers and rewrite modules and restart Apache2 +**Step 1.** Enable headers and rewrite modules and reload Apache2 $ sudo a2enmod headers rewrite - $ sudo systemctl restart apache2 + $ sudo systemctl reload apache2 If you get an error message, something has gone wrong and you cannot continue until you've figured out why this didn't work. @@ -52,9 +52,14 @@ Virtual Host example: ``` <VirtualHost *:443> - ServerName your-website.tld - DocumentRoot /var/www/html - Header set Onion-Location "http://rh5d6reakhpvuxe2t3next6um6iiq4jf43m7gmdrphfhopfpnoglzcyd%{REQUEST_UR…" + ServerName <your-website.tld> + DocumentRoot /path/to/htdocs + + Header set Onion-Location "http://your-onion-address.onion%{REQUEST_URI}s" + + SSLEngine on + SSLCertificateFile "/path/to/www.example.com.cert" + SSLCertificateKeyFile "/path/to/www.example.com.key" </VirtualHost> ``` @@ -72,40 +77,66 @@ To test if Onion-Location is working, fetch the website HTTP headers, for exampl $ wget --server-response --spider your-website.tld -Look for the `onion-location` entry and the onion service address. - +Look for `onion-location` entry and the onion service address. Or open the website in Tor Browser and a purple pill will appear in the address bar. ### Nginx -To configure Onion-Location header, you will need to edit Nginx website configuration file. +To configure Onion-Location header, you will need to edit nginx website configuration file. **Step 1.** Edit website configuration file -In `/etc/nginx/conf.d/<your-website.conf` add the new Onion-Location header and the onion service address. +In `/etc/nginx/conf.d/<your-website>.conf` add the Onion-Location header and the onion service address. For example: ``` - location / { - add_header Onion-Location http://rh5d6reakhpvuxe2t3next6um6iiq4jf43m7gmdrphfhopfpnoglzcyd.onion$reque…; - } + add_header Onion-Location http://<your-onion-address>.onion$request_uri; ``` + The configuration file with Onion-Location should look like: ``` server { - listen 443; + listen 80; + listen [::]:80; + + server_name <your-website.tld>; + + location / { + return 301 https://$host$request_uri; + } + +} + +server { + listen 443 ssl http2; + listen [::]:443 ssl http2; + + server_name <your-website.tld> <your-onion-address.onion>; + + # managed by Certbot - https://certbot.eff.org/ + ssl_certificate /etc/letsencrypt/live/<hostname>/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/<hostname>/privkey.pem; - root /var/www/your-website/html; - index index.html index.htm; + add_header Strict-Transport-Security "max-age=63072000; includeSubdomains"; + add_header X-Frame-Options DENY; + add_header X-Content-Type-Options nosniff; + add_header Onion-Location http://<your-onion-address>.onion$request_uri; - server_name your-website.tld; + # managed by Certbot - location / { - try_files $uri $uri/ =404; - add_header Onion-Location http://rh5d6reakhpvuxe2t3next6um6iiq4jf43m7gmdrphfhopfpnoglzcyd.onion$reque…; - } + include /etc/letsencrypt/options-ssl-nginx.conf; + ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; + + access_log /var/log/nginx/<hostname>-access.log; + + index index.html; + root /path/to/htdocs; + + location / { + try_files $uri $uri/ =404; + } } ``` @@ -132,8 +163,7 @@ To test if Onion-Location is working, fetch the website HTTP headers, for exampl $ wget --server-response --spider your-website.tld -Look for the `onion-location` entry and the onion service address. - +Look for `onion-location` entry and the onion service address. Or open the website in Tor Browser and a purple pill will appear in the address bar. ### Using an HTML `<meta>` attribute

1 0

[community/master] Merge branch 'onion-advanced-tips'
by gus＠torproject.org 01 Jun '20

01 Jun '20

commit 883504023cab17750614a03e4be5e8eeaa139c78 Merge: e494731 3f25f45 Author: gus <gus(a)torproject.org> Date: Mon Jun 1 13:54:44 2020 -0400 Merge branch 'onion-advanced-tips' .../advanced/client-auth/contents.lr | 125 +++++++++++++++ content/onion-services/advanced/contents.lr | 19 +++ .../advanced/onion-location/contents.lr | 177 +++++++++++++++++++++ content/onion-services/advanced/opsec/contents.lr | 32 ++++ content/onion-services/setup/contents.lr | 25 +-- 5 files changed, 369 insertions(+), 9 deletions(-)

1 0

[tpo/master] Update content
by antonela＠torproject.org 01 Jun '20

01 Jun '20

commit 8e2322b594e603e2494644480b9d7b544422a1ae Author: Antonela <hola(a)antonela.me> Date: Mon Jun 1 15:16:48 2020 -0300 Update content The template is working now \o/ --- .../tor-browser/tor-browser-95/contents.lr | 99 ++-------------------- templates/release.html | 50 +++++++---- 2 files changed, 43 insertions(+), 106 deletions(-) diff --git a/content/releases/tor-browser/tor-browser-95/contents.lr b/content/releases/tor-browser/tor-browser-95/contents.lr index 5188e689..83c5713a 100644 --- a/content/releases/tor-browser/tor-browser-95/contents.lr +++ b/content/releases/tor-browser/tor-browser-95/contents.lr @@ -1,6 +1,6 @@ section: What is new --- -html: release.html +_template: release.html --- color: primary --- @@ -19,114 +19,31 @@ For the first time, Tor Browser users will be able to opt-in for using onion sit ### What is new? **Onion Location** + Website publishers now can advertise their onion service to Tor users by adding an HTTP header. When visiting a website that has both an .onion address and Onion Location enabled via Tor Browser, users will be prompted about the onion service version of the site and will be asked to opt-in to upgrade to the onion service on their first use. **Onion Authentication** + Onion services administrators who want to add an extra layer of security to their website can now set a pair of keys for access control and authentication. Tor Browser users can save keys and manage them via about:preferences#privacy in the Onion Services Authentication section. **Improved URL Bar Security Indicators** + Browsers traditionally rendered sites delivered via a secure transport protocol with a green lock icon. But in mid-2019, the formerly green lock icon became gray, intending to de-emphasize the default (safe) connection state and instead of putting more emphasis on broken or insecure connections. Major browsers as Firefox and Chrome understood that it is a benefit for the entire user base if they deploy familiar experiences for both users. We are following Firefox on this decision, and have we updated Tor Browser security indicators to make it easier for users to understand when they are visiting an non-secure website. **Error pages for onion services** + Sometimes users have a hard time reaching onion sites. In previous version of Tor Browser, when there was an error connecting to an onion service, users received a standard Firefox error message, with no information about why they were unable to connect to the onion site. In this release, we have improved the way Tor Browser communicates with users about service-, client-, and network-side errors that might happpen when they are trying to visit an onion service. Tor Browser now displays a simplified diagram of the connection and shows where the error occured. We want these messages to be clear and informative without being overwhelming. **Onion Names** + Because of cryptographic protections, onion service URLs are not easy for humans to remember (ie, torproject.org vs. expyuzz4wqqyqhjn.onion). This makes it hard for users to discover or return to an onion site. We found that organically, developers have approached this problem in different ways, mostly with solutions tailored for their service. Given that there is no solution that works perfectly for all our user groups, we also approached this problem from a broad angle. For this release, we partnered with the [Freedom of the Press Foundation](https://freedom.press/) and [HTTPS Everywhere](https://www.eff.org/https-everywhere) to develop the first proof-of-concept for human-memorable names for onion services addresses. **Known Issues** + Tor Browser 9.5 comes with a number of known issues. The most important ones are: **Give Feedback** -If you find a bug or have a suggestion for how we could improve this release, please let us know. Thanks to all of the teams across Tor, and the many volunteers, who contributed to this release. -**Full Changelog** -The full changelog since Tor Browser 9.0.10 is: - - * All Platforms - * Update Firefox to 68.9.0esr - * Update HTTPS-Everywhere to 2020.5.20 - * Update NoScript to 11.0.26 - * Update Tor to 0.4.3.5 - * Translations update - * Bug 21549: Disable wasm for now until it is properly audited - * Bug 27268: Preferences clean-up in Torbutton code - * Bug 28745: Remove torbutton.js unused code - * Bug 28746: Remove torbutton isolation and fp prefs sync - * Bug 30237: Control port module improvements for v3 client authentication - * Bug 30786: Add th locale - * Bug 30787: Add lt locale - * Bug 30788: Add ms locale - * Bug 30851: Move default preferences to 000-tor-browser.js - * Bug 30888: move torbutton_util.js to modules/utils.js - * Bug 31134: Govern graphite again by security settings - * Bug 31395: Remove inline script in aboutTor.xhtml - * Bug 31499: Update libevent to 2.1.11-stable - * Bug 33877: Disable Samples and Regression tests For Libevent Build - * Bug 31573: Catch SessionStore.jsm exception - * Bug 32318: Backport Mozilla's fix for bug 1534339 - * Bug 32414: Make Services.search.addEngine obey FPI - * Bug 32493: Disable MOZ_SERVICES_HEALTHREPORT - * Bug 32618: Backport fixes from Mozilla bugs 1467970 and 1590526 - * Bug 33342: Avoid disconnect search addon error after removal - * Bug 33726: Fix patch for #23247: Communicating security expectations for .onion - * Bug 34157: Backport fix for Mozilla Bug 1511941 - * Windows + OS X + Linux - * Update Tor Launcher to 0.2.21.8 - * Translations update - * Bug 19757: Support on-disk storage of v3 client auth keys - * Bug 30237: Add v3 onion services client authentication prompt - * Bug 30786: Add th locale - * Bug 30787: Add lt locale - * Bug 30788: Add ms locale - * Bug 33514: non-en-US Tor Browser 9.5a6 won't start up - * Bug 19251: Show improved error pages for onion service errors - * Bug 19757: Support on-disk storage of v3 client auth keys - * Bug 21952: Implement Onion-Location - * Bug 27604: Fix broken Tor Browser after moving it to a different directory - * Bug 28005: Implement .onion alias urlbar rewrites - * Bug 30237: Improve TBB UI of hidden service client authorization - * Bug 32076: Upgrade to goptlib v1.1.0 - * Bug 32220: Improve the letterboxing experience - * Bug 32418: Allow updates to be disabled via an enterprise policy. - * Bug 32470: Backport fix for bug 1590538 - * Bug 32645: Update URL bar onion indicators - * Bug 32658: Create a new MAR signing key - * Bug 32674: Point the about:tor "Get involved" link to the community portal - * Bug 32767: Remove Disconnect search - * Bug 33698: Update "About Tor Browser" links in Tor Browser - * Bug 33707: Swap out onion icon in circuit display with new one - * Bug 34032: Use Securedrop's Official https-everywhere ruleset - * Bug 34196: Update site info URL with the onion name - * Bug 34321: Add Learn More onboarding item - * Windows - * Bug 22919: Improve the random number generator for the boundaries in multipart/form-data - * Bug 29614: Use SHA-256 algorithm for Windows timestamping - * Bug 33113: Bump NSIS version to 3.05 - * OS X - * Bug 32505: Tighten our rules in our entitlements file for macOS - * Linux - * Bug 34315: Avoid reading policies from /etc/firefox on Linux - * Android - * Bug 26529: Notify user about possible proxy-bypass before opening external app - * Bug 30767: Custom obfs4 bridge does not work on Tor Browser for Android - * Bug 32303: Obfs4 is broken on Android Q - * Bug 33359: Use latest Version of TOPL and Remove Patches - * Bug 33931: obfs4 bridges are used instead of meek if meek is selected in Tor Browser for Android alpha - * Build System - * All Platforms - * Go to 1.13.11 - * Bug 33380: Add *.json to sha256sums-unsigned-build.txt - * Windows - * Bug 33802: --enable-secure-api is not supported anymore in mingw-w64 - * Linux - * Bug 32976: Build and bundle geckodriver - * Bug 34242: Fix creation of Linux containers - * Android - * Bug 28765: LibEvent Build for Android - * Bug 28766: Tor Build for Android - * Bug 28803: Integrate building Pluggable Transports for Android - * Bug 30461: Clean up tor-android-service project - * Bug 32993: Package Tor With Tor Android Service Project - * Bug 33685: Add Support for Building zlib for Android +If you find a bug or have a suggestion for how we could improve this release, please let us know. Thanks to all of the teams across Tor, and the many volunteers, who contributed to this release. diff --git a/templates/release.html b/templates/release.html index 75c2cb4b..9200ebd4 100644 --- a/templates/release.html +++ b/templates/release.html @@ -1,18 +1,38 @@ -<div class="container py-3 mt-5 content"> +{% include 'meta.html' %} + <div class="page pt-4"> + {% include 'header.html' %} + <div class="container-fluid"> + <div class="row flex-xl-nowrap"> + {% set locale = bag('alternatives', this.alt) %} + <main role="main" class="mx-auto col-12 {{ locale.order }} {{ locale.direction }}"> - <div class="col-sm-9"> - {% block body %} - {{ this.body }} - {% endblock %} - </div> + <div class="container py-3 mt-5 content"> - <div class="card mt-5"> - <ul class="list-group list-group-flush"> -  - <li class="list-group-item"> - <a href="{{ this.parent|url }}">{{ _("Back to previous page: ") }}{{ this.parent.title }}</a> - <a href="https://github.com/torproject/community/edit/master/content{{ this.path }}/contents.lr">{{ _("Edit this page") }}</a> - </li> - </ul> - </div> + <div class="col-sm-9"> + {% block body %} + {{ this.body }} + {% endblock %} + </div> + + <div class="card mt-5"> + <ul class="list-group list-group-flush"> +  + <li class="list-group-item"> + <a href="{{ this.parent|url }}">{{ _("Back to previous page: ") }}{{ this.parent.title }}</a> - <a href="https://github.com/torproject/community/edit/master/content{{ this.path }}/contents.lr">{{ _("Edit this page") }}</a> + </li> + </ul> + </div> -</div> + </div> + + </main> + </div> + </div> + </div> + {% if this.section == "Download" %} + {% include 'footer-min.html' %} + {% else %} + {% include 'footer.html' %} + {% endif %} +</body> +</html>

1 0

[tpo/master] Add content for TB9.5 release
by antonela＠torproject.org 01 Jun '20

01 Jun '20

commit 7800bf9b89760d14e1744264bfa98d2b5d374730 Author: Antonela <hola(a)antonela.me> Date: Mon Jun 1 14:55:05 2020 -0300 Add content for TB9.5 release The template is broken. Working on fixing it. --- content/releases/contents.lr | 2 +- content/releases/tor-browser-95/contents.lr | 52 -------- content/releases/tor-browser/contents.lr | 11 ++ .../tor-browser/tor-browser-95/contents.lr | 132 +++++++++++++++++++++ templates/release.html | 29 +++-- 5 files changed, 158 insertions(+), 68 deletions(-) diff --git a/content/releases/contents.lr b/content/releases/contents.lr index 88c1eeb3..b8a1c693 100644 --- a/content/releases/contents.lr +++ b/content/releases/contents.lr @@ -6,6 +6,6 @@ html: releases.html --- color: primary --- -title: Tor Browser +title: Releases --- body: diff --git a/content/releases/tor-browser-95/contents.lr b/content/releases/tor-browser-95/contents.lr deleted file mode 100644 index a6afb375..00000000 --- a/content/releases/tor-browser-95/contents.lr +++ /dev/null @@ -1,52 +0,0 @@ -section: What is new ---- -template: layout.html ---- -html: release.html ---- -color: primary ---- -title: Tor Browser 9.5 ---- -body: - -Tor Browser 9.5a12 is now available from the Tor Browser Alpha download page and also from our distribution directory. - -Note: This is an alpha release, an experimental version for users who want to help us test new features. For everyone else, we recommend downloading the latest stable release instead.This release updates Firefox to 68.8.0esr, NoScript to 11.0.25, OpenSSL to 1.1.1g, and Tor to 0.4.3.4-rc. In addition, the Android Tor Browser now includes Tor built using the reproducible build system. - -Also, this release features important security updates to Firefox. - -The full changelog since Tor Browser 9.5a11 is: - - All Platforms - Update Firefox to 68.8.0esr - Bump NoScript to 11.0.25 - Bump Tor to 0.4.3.4-rc - Translations update - Bug 31499: Update libevent to 2.1.11-stable - Bug 33877: Disable Samples and Regression tests For Libevent Build - Bug 33630: Remove noisebridge01 default bridge - Bug 33726: Fix patch for #23247: Communicating security expectations for .onion - Bug 34017: Bump openssl version to 1.1.1g - Bug 33698: Update "About Tor Browser" links in Tor Browser - Windows + OS X + Linux - Update Tor Launcher to 0.2.21.6 - Translations update - Bug 33576: Update pion-webrtc version to 2.2.3 - Bug 32418: Allow updates to be disabled via an enterprise policy. - Bug 34032: Use Securedrop's Official https-everywhere ruleset - Windows - Bug 29614: Use SHA-256 algorithm for Windows timestamping - Android - Bug 33359: Use latest Version of TOPL and Remove Patches - Bug 33931: obfs4 bridges are used instead of meek if meek is selected in Tor Browser for Android alpha - Build System - All Platforms - Bug 32027: Bump Go to 1.13.10 - Android - Bug 28765: LibEvent Build for Android - Bug 28766: Tor Build for Android - Bug 32993: Package Tor With Tor Android Service Project - Bug 33685: Add Support for Building zlib for Android - Windows - Bug 33802: --enable-secure-api is not supported anymore in mingw-w64 diff --git a/content/releases/tor-browser/contents.lr b/content/releases/tor-browser/contents.lr new file mode 100644 index 00000000..b85e3323 --- /dev/null +++ b/content/releases/tor-browser/contents.lr @@ -0,0 +1,11 @@ +section: What is new +--- +template: layout.html +--- +html: releases.html +--- +color: primary +--- +title: Tor Browser Releases +--- +body: diff --git a/content/releases/tor-browser/tor-browser-95/contents.lr b/content/releases/tor-browser/tor-browser-95/contents.lr new file mode 100644 index 00000000..5188e689 --- /dev/null +++ b/content/releases/tor-browser/tor-browser-95/contents.lr @@ -0,0 +1,132 @@ +section: What is new +--- +html: release.html +--- +color: primary +--- +title: Tor Browser 9.5 +--- +body: + +## Tor Browser 9.5 is now available from the Tor Browser download page and from our distribution directory. The Android version is also available from Google Play and should be available from F-Droid within the next day. + +This new Tor Browser release is focused on helping users understand onion services. + +Tor's onion routing remains the best way to achieve end-to-end anonymous communication on the Internet. With onion services (.onion addresses), website administrators can provide their users with anonymous connections that are metadata-free or that hide metadata from any third party. Onion services are also one of the few censorship circumvention technologies that allow users to route around censorship while simultaneously protecting their privacy and identity. + +For the first time, Tor Browser users will be able to opt-in for using onion sites automatically whenever the website makes them available. For years, some websites have invisibly used onion services with alternative services, and this continues to be an excellent choice. Now, there is also an option for websites that want their users to know about their onion service to invite them to opt-in to use their .onion address. + +### What is new? + +**Onion Location** +Website publishers now can advertise their onion service to Tor users by adding an HTTP header. When visiting a website that has both an .onion address and Onion Location enabled via Tor Browser, users will be prompted about the onion service version of the site and will be asked to opt-in to upgrade to the onion service on their first use. + +**Onion Authentication** +Onion services administrators who want to add an extra layer of security to their website can now set a pair of keys for access control and authentication. Tor Browser users can save keys and manage them via about:preferences#privacy in the Onion Services Authentication section. + +**Improved URL Bar Security Indicators** +Browsers traditionally rendered sites delivered via a secure transport protocol with a green lock icon. But in mid-2019, the formerly green lock icon became gray, intending to de-emphasize the default (safe) connection state and instead of putting more emphasis on broken or insecure connections. Major browsers as Firefox and Chrome understood that it is a benefit for the entire user base if they deploy familiar experiences for both users. We are following Firefox on this decision, and have we updated Tor Browser security indicators to make it easier for users to understand when they are visiting an non-secure website. + +**Error pages for onion services** +Sometimes users have a hard time reaching onion sites. In previous version of Tor Browser, when there was an error connecting to an onion service, users received a standard Firefox error message, with no information about why they were unable to connect to the onion site. + +In this release, we have improved the way Tor Browser communicates with users about service-, client-, and network-side errors that might happpen when they are trying to visit an onion service. Tor Browser now displays a simplified diagram of the connection and shows where the error occured. We want these messages to be clear and informative without being overwhelming. + +**Onion Names** +Because of cryptographic protections, onion service URLs are not easy for humans to remember (ie, torproject.org vs. expyuzz4wqqyqhjn.onion). This makes it hard for users to discover or return to an onion site. We found that organically, developers have approached this problem in different ways, mostly with solutions tailored for their service. Given that there is no solution that works perfectly for all our user groups, we also approached this problem from a broad angle. For this release, we partnered with the [Freedom of the Press Foundation](https://freedom.press/) and [HTTPS Everywhere](https://www.eff.org/https-everywhere) to develop the first proof-of-concept for human-memorable names for onion services addresses. + +**Known Issues** +Tor Browser 9.5 comes with a number of known issues. The most important ones are: + +**Give Feedback** +If you find a bug or have a suggestion for how we could improve this release, please let us know. Thanks to all of the teams across Tor, and the many volunteers, who contributed to this release. + +**Full Changelog** +The full changelog since Tor Browser 9.0.10 is: + + * All Platforms + * Update Firefox to 68.9.0esr + * Update HTTPS-Everywhere to 2020.5.20 + * Update NoScript to 11.0.26 + * Update Tor to 0.4.3.5 + * Translations update + * Bug 21549: Disable wasm for now until it is properly audited + * Bug 27268: Preferences clean-up in Torbutton code + * Bug 28745: Remove torbutton.js unused code + * Bug 28746: Remove torbutton isolation and fp prefs sync + * Bug 30237: Control port module improvements for v3 client authentication + * Bug 30786: Add th locale + * Bug 30787: Add lt locale + * Bug 30788: Add ms locale + * Bug 30851: Move default preferences to 000-tor-browser.js + * Bug 30888: move torbutton_util.js to modules/utils.js + * Bug 31134: Govern graphite again by security settings + * Bug 31395: Remove inline script in aboutTor.xhtml + * Bug 31499: Update libevent to 2.1.11-stable + * Bug 33877: Disable Samples and Regression tests For Libevent Build + * Bug 31573: Catch SessionStore.jsm exception + * Bug 32318: Backport Mozilla's fix for bug 1534339 + * Bug 32414: Make Services.search.addEngine obey FPI + * Bug 32493: Disable MOZ_SERVICES_HEALTHREPORT + * Bug 32618: Backport fixes from Mozilla bugs 1467970 and 1590526 + * Bug 33342: Avoid disconnect search addon error after removal + * Bug 33726: Fix patch for #23247: Communicating security expectations for .onion + * Bug 34157: Backport fix for Mozilla Bug 1511941 + * Windows + OS X + Linux + * Update Tor Launcher to 0.2.21.8 + * Translations update + * Bug 19757: Support on-disk storage of v3 client auth keys + * Bug 30237: Add v3 onion services client authentication prompt + * Bug 30786: Add th locale + * Bug 30787: Add lt locale + * Bug 30788: Add ms locale + * Bug 33514: non-en-US Tor Browser 9.5a6 won't start up + * Bug 19251: Show improved error pages for onion service errors + * Bug 19757: Support on-disk storage of v3 client auth keys + * Bug 21952: Implement Onion-Location + * Bug 27604: Fix broken Tor Browser after moving it to a different directory + * Bug 28005: Implement .onion alias urlbar rewrites + * Bug 30237: Improve TBB UI of hidden service client authorization + * Bug 32076: Upgrade to goptlib v1.1.0 + * Bug 32220: Improve the letterboxing experience + * Bug 32418: Allow updates to be disabled via an enterprise policy. + * Bug 32470: Backport fix for bug 1590538 + * Bug 32645: Update URL bar onion indicators + * Bug 32658: Create a new MAR signing key + * Bug 32674: Point the about:tor "Get involved" link to the community portal + * Bug 32767: Remove Disconnect search + * Bug 33698: Update "About Tor Browser" links in Tor Browser + * Bug 33707: Swap out onion icon in circuit display with new one + * Bug 34032: Use Securedrop's Official https-everywhere ruleset + * Bug 34196: Update site info URL with the onion name + * Bug 34321: Add Learn More onboarding item + * Windows + * Bug 22919: Improve the random number generator for the boundaries in multipart/form-data + * Bug 29614: Use SHA-256 algorithm for Windows timestamping + * Bug 33113: Bump NSIS version to 3.05 + * OS X + * Bug 32505: Tighten our rules in our entitlements file for macOS + * Linux + * Bug 34315: Avoid reading policies from /etc/firefox on Linux + * Android + * Bug 26529: Notify user about possible proxy-bypass before opening external app + * Bug 30767: Custom obfs4 bridge does not work on Tor Browser for Android + * Bug 32303: Obfs4 is broken on Android Q + * Bug 33359: Use latest Version of TOPL and Remove Patches + * Bug 33931: obfs4 bridges are used instead of meek if meek is selected in Tor Browser for Android alpha + * Build System + * All Platforms + * Go to 1.13.11 + * Bug 33380: Add *.json to sha256sums-unsigned-build.txt + * Windows + * Bug 33802: --enable-secure-api is not supported anymore in mingw-w64 + * Linux + * Bug 32976: Build and bundle geckodriver + * Bug 34242: Fix creation of Linux containers + * Android + * Bug 28765: LibEvent Build for Android + * Bug 28766: Tor Build for Android + * Bug 28803: Integrate building Pluggable Transports for Android + * Bug 30461: Clean up tor-android-service project + * Bug 32993: Package Tor With Tor Android Service Project + * Bug 33685: Add Support for Building zlib for Android diff --git a/templates/release.html b/templates/release.html index f695b54b..75c2cb4b 100644 --- a/templates/release.html +++ b/templates/release.html @@ -1,19 +1,18 @@ -<div class="row"> +<div class="container py-3 mt-5 content"> - <div class="container py-3 mt-5 content"> - <div class="col-sm-9"> - {% for item in this.children %} - <a href="{{ item.path|url }}">{{ item.title }}</a> - {% endfor %} - </div> - <div class="card mt-5"> - <ul class="list-group list-group-flush"> -  - <li class="list-group-item"> - <a href="{{ this.parent|url }}">{{ _("Back to previous page: ") }}{{ this.parent.title }}</a> - <a href="https://github.com/torproject/community/edit/master/content{{ this.path }}/contents.lr">{{ _("Edit this page") }}</a> - </li> - </ul> - </div> + <div class="col-sm-9"> + {% block body %} + {{ this.body }} + {% endblock %} + </div> + + <div class="card mt-5"> + <ul class="list-group list-group-flush"> +  + <li class="list-group-item"> + <a href="{{ this.parent|url }}">{{ _("Back to previous page: ") }}{{ this.parent.title }}</a> - <a href="https://github.com/torproject/community/edit/master/content{{ this.path }}/contents.lr">{{ _("Edit this page") }}</a> + </li> + </ul> </div> </div>

1 0

[tpo/tb-new-release-template] atempt to have a template
by antonela＠torproject.org 01 Jun '20

01 Jun '20

commit ccce8aaa5a95f4d453dc227fa1779b40f912569a Author: Antonela <hola(a)antonela.me> Date: Mon Jun 1 12:59:07 2020 -0300 atempt to have a template is broken :( --- content/releases/contents.lr | 11 ++ content/releases/tor-browser/contents.lr | 11 ++ .../tor-browser/tor-browser-95/contents.lr | 132 +++++++++++++++++++++ templates/release.html | 40 +++++++ 4 files changed, 194 insertions(+) diff --git a/content/releases/contents.lr b/content/releases/contents.lr new file mode 100644 index 00000000..88c1eeb3 --- /dev/null +++ b/content/releases/contents.lr @@ -0,0 +1,11 @@ +section: What is new +--- +template: layout.html +--- +html: releases.html +--- +color: primary +--- +title: Tor Browser +--- +body: diff --git a/content/releases/tor-browser/contents.lr b/content/releases/tor-browser/contents.lr new file mode 100644 index 00000000..136cf585 --- /dev/null +++ b/content/releases/tor-browser/contents.lr @@ -0,0 +1,11 @@ +section: What is new +--- +template: layout.html +--- +html: release.html +--- +color: primary +--- +title: Tor Browser +--- +body: diff --git a/content/releases/tor-browser/tor-browser-95/contents.lr b/content/releases/tor-browser/tor-browser-95/contents.lr new file mode 100644 index 00000000..297df5f8 --- /dev/null +++ b/content/releases/tor-browser/tor-browser-95/contents.lr @@ -0,0 +1,132 @@ +section: What is new +--- +template: release.html +--- +color: primary +--- +title: Tor Browser 9.5 +--- +body: + +## Tor Browser 9.5 is now available from the Tor Browser download page and from our distribution directory. The Android version is also available from Google Play and should be available from F-Droid within the next day. + +This new Tor Browser release is focused on helping users understand onion services. + +Tor's onion routing remains the best way to achieve end-to-end anonymous communication on the Internet. With onion services (.onion addresses), website administrators can provide their users with anonymous connections that are metadata-free or that hide metadata from any third party. Onion services are also one of the few censorship circumvention technologies that allow users to route around censorship while simultaneously protecting their privacy and identity. + +For the first time, Tor Browser users will be able to opt-in for using onion sites automatically whenever the website makes them available. For years, some websites have invisibly used onion services with alternative services, and this continues to be an excellent choice. Now, there is also an option for websites that want their users to know about their onion service to invite them to opt-in to use their .onion address. + +### What is new? + +**Onion Location** +Website publishers now can advertise their onion service to Tor users by adding an HTTP header. When visiting a website that has both an .onion address and Onion Location enabled via Tor Browser, users will be prompted about the onion service version of the site and will be asked to opt-in to upgrade to the onion service on their first use. + +**Onion Authentication** +Onion services administrators who want to add an extra layer of security to their website can now set a pair of keys for access control and authentication. Tor Browser users can save keys and manage them via about:preferences#privacy in the Onion Services Authentication section. + +**Improved URL Bar Security Indicators** +Browsers traditionally rendered sites delivered via a secure transport protocol with a green lock icon. But in mid-2019, the formerly green lock icon became gray, intending to de-emphasize the default (safe) connection state and instead of putting more emphasis on broken or insecure connections. Major browsers as Firefox and Chrome understood that it is a benefit for the entire user base if they deploy familiar experiences for both users. We are following Firefox on this decision, and have we updated Tor Browser security indicators to make it easier for users to understand when they are visiting an non-secure website. + +**Error pages for onion services** +Sometimes users have a hard time reaching onion sites. In previous version of Tor Browser, when there was an error connecting to an onion service, users received a standard Firefox error message, with no information about why they were unable to connect to the onion site. + +In this release, we have improved the way Tor Browser communicates with users about service-, client-, and network-side errors that might happpen when they are trying to visit an onion service. Tor Browser now displays a simplified diagram of the connection and shows where the error occured. We want these messages to be clear and informative without being overwhelming. + +**Onion Names** +Because of cryptographic protections, onion service URLs are not easy for humans to remember (ie, torproject.org vs. expyuzz4wqqyqhjn.onion). This makes it hard for users to discover or return to an onion site. We found that organically, developers have approached this problem in different ways, mostly with solutions tailored for their service. Given that there is no solution that works perfectly for all our user groups, we also approached this problem from a broad angle. For this release, we partnered with the [Freedom of the Press Foundation](https://freedom.press/) and [HTTPS Everywhere](https://www.eff.org/https-everywhere) to develop the first proof-of-concept for human-memorable names for onion services addresses. + +**Known Issues** +Tor Browser 9.5 comes with a number of known issues. The most important ones are: + +**Give Feedback** +If you find a bug or have a suggestion for how we could improve this release, please let us know. Thanks to all of the teams across Tor, and the many volunteers, who contributed to this release. + +**Full Changelog** +The full changelog since Tor Browser 9.0.10 is: + + * All Platforms + * Update Firefox to 68.9.0esr + * Update HTTPS-Everywhere to 2020.5.20 + * Update NoScript to 11.0.26 + * Update Tor to 0.4.3.5 + * Translations update + * Bug 21549: Disable wasm for now until it is properly audited + * Bug 27268: Preferences clean-up in Torbutton code + * Bug 28745: Remove torbutton.js unused code + * Bug 28746: Remove torbutton isolation and fp prefs sync + * Bug 30237: Control port module improvements for v3 client authentication + * Bug 30786: Add th locale + * Bug 30787: Add lt locale + * Bug 30788: Add ms locale + * Bug 30851: Move default preferences to 000-tor-browser.js + * Bug 30888: move torbutton_util.js to modules/utils.js + * Bug 31134: Govern graphite again by security settings + * Bug 31395: Remove inline script in aboutTor.xhtml + * Bug 31499: Update libevent to 2.1.11-stable + * Bug 33877: Disable Samples and Regression tests For Libevent Build + * Bug 31573: Catch SessionStore.jsm exception + * Bug 32318: Backport Mozilla's fix for bug 1534339 + * Bug 32414: Make Services.search.addEngine obey FPI + * Bug 32493: Disable MOZ_SERVICES_HEALTHREPORT + * Bug 32618: Backport fixes from Mozilla bugs 1467970 and 1590526 + * Bug 33342: Avoid disconnect search addon error after removal + * Bug 33726: Fix patch for #23247: Communicating security expectations for .onion + * Bug 34157: Backport fix for Mozilla Bug 1511941 + * Windows + OS X + Linux + * Update Tor Launcher to 0.2.21.8 + * Translations update + * Bug 19757: Support on-disk storage of v3 client auth keys + * Bug 30237: Add v3 onion services client authentication prompt + * Bug 30786: Add th locale + * Bug 30787: Add lt locale + * Bug 30788: Add ms locale + * Bug 33514: non-en-US Tor Browser 9.5a6 won't start up + * Bug 19251: Show improved error pages for onion service errors + * Bug 19757: Support on-disk storage of v3 client auth keys + * Bug 21952: Implement Onion-Location + * Bug 27604: Fix broken Tor Browser after moving it to a different directory + * Bug 28005: Implement .onion alias urlbar rewrites + * Bug 30237: Improve TBB UI of hidden service client authorization + * Bug 32076: Upgrade to goptlib v1.1.0 + * Bug 32220: Improve the letterboxing experience + * Bug 32418: Allow updates to be disabled via an enterprise policy. + * Bug 32470: Backport fix for bug 1590538 + * Bug 32645: Update URL bar onion indicators + * Bug 32658: Create a new MAR signing key + * Bug 32674: Point the about:tor "Get involved" link to the community portal + * Bug 32767: Remove Disconnect search + * Bug 33698: Update "About Tor Browser" links in Tor Browser + * Bug 33707: Swap out onion icon in circuit display with new one + * Bug 34032: Use Securedrop's Official https-everywhere ruleset + * Bug 34196: Update site info URL with the onion name + * Bug 34321: Add Learn More onboarding item + * Windows + * Bug 22919: Improve the random number generator for the boundaries in multipart/form-data + * Bug 29614: Use SHA-256 algorithm for Windows timestamping + * Bug 33113: Bump NSIS version to 3.05 + * OS X + * Bug 32505: Tighten our rules in our entitlements file for macOS + * Linux + * Bug 34315: Avoid reading policies from /etc/firefox on Linux + * Android + * Bug 26529: Notify user about possible proxy-bypass before opening external app + * Bug 30767: Custom obfs4 bridge does not work on Tor Browser for Android + * Bug 32303: Obfs4 is broken on Android Q + * Bug 33359: Use latest Version of TOPL and Remove Patches + * Bug 33931: obfs4 bridges are used instead of meek if meek is selected in Tor Browser for Android alpha + * Build System + * All Platforms + * Go to 1.13.11 + * Bug 33380: Add *.json to sha256sums-unsigned-build.txt + * Windows + * Bug 33802: --enable-secure-api is not supported anymore in mingw-w64 + * Linux + * Bug 32976: Build and bundle geckodriver + * Bug 34242: Fix creation of Linux containers + * Android + * Bug 28765: LibEvent Build for Android + * Bug 28766: Tor Build for Android + * Bug 28803: Integrate building Pluggable Transports for Android + * Bug 30461: Clean up tor-android-service project + * Bug 32993: Package Tor With Tor Android Service Project + * Bug 33685: Add Support for Building zlib for Android diff --git a/templates/release.html b/templates/release.html new file mode 100644 index 00000000..dd0f770a --- /dev/null +++ b/templates/release.html @@ -0,0 +1,40 @@ +{% include 'meta.html' %} + <div class="page pt-4"> + {% include 'header.html' %} + <div class="container-fluid"> + <div class="row flex-xl-nowrap"> + {% set locale = bag('alternatives', this.alt) %} + <main role="main" class="mx-auto col-12 {{ locale.order }} {{ locale.direction }}"> + + + <div class="container py-3 mt-5 content"> + + <div class="col-sm-9"> + {% block body %} + {{ this.body }} + {% endblock %} + </div> + + <div class="card mt-5"> + <ul class="list-group list-group-flush"> +  + <li class="list-group-item"> + <a href="{{ this.parent|url }}">{{ _("Back to previous page: ") }}{{ this.parent.title }}</a> - <a href="https://github.com/torproject/community/edit/master/content{{ this.path }}/contents.lr">{{ _("Edit this page") }}</a> + </li> + </ul> + </div> + + </div> + + + </main> + </div> + </div> + </div> + {% if this.section == "Download" %} + {% include 'footer-min.html' %} + {% else %} + {% include 'footer.html' %} + {% endif %} +</body> +</html>

1 0

[tpo/tb-new-release-template] atempt to have a template
by antonela＠torproject.org 01 Jun '20

01 Jun '20

commit a0625c3705624ac4506b71cbb4357bad8b0d4f70 Author: Antonela <hola(a)antonela.me> Date: Mon Jun 1 12:56:33 2020 -0300 atempt to have a template is broken :( --- content/new-release/tor-browser/contents.lr | 11 ++ .../tor-browser/tor-browser-95/contents.lr | 132 +++++++++++++++++++++ templates/new-release.html | 53 ++++++--- 3 files changed, 180 insertions(+), 16 deletions(-) diff --git a/content/new-release/tor-browser/contents.lr b/content/new-release/tor-browser/contents.lr new file mode 100644 index 00000000..136cf585 --- /dev/null +++ b/content/new-release/tor-browser/contents.lr @@ -0,0 +1,11 @@ +section: What is new +--- +template: layout.html +--- +html: release.html +--- +color: primary +--- +title: Tor Browser +--- +body: diff --git a/content/new-release/tor-browser/tor-browser-95/contents.lr b/content/new-release/tor-browser/tor-browser-95/contents.lr new file mode 100644 index 00000000..297df5f8 --- /dev/null +++ b/content/new-release/tor-browser/tor-browser-95/contents.lr @@ -0,0 +1,132 @@ +section: What is new +--- +template: release.html +--- +color: primary +--- +title: Tor Browser 9.5 +--- +body: + +## Tor Browser 9.5 is now available from the Tor Browser download page and from our distribution directory. The Android version is also available from Google Play and should be available from F-Droid within the next day. + +This new Tor Browser release is focused on helping users understand onion services. + +Tor's onion routing remains the best way to achieve end-to-end anonymous communication on the Internet. With onion services (.onion addresses), website administrators can provide their users with anonymous connections that are metadata-free or that hide metadata from any third party. Onion services are also one of the few censorship circumvention technologies that allow users to route around censorship while simultaneously protecting their privacy and identity. + +For the first time, Tor Browser users will be able to opt-in for using onion sites automatically whenever the website makes them available. For years, some websites have invisibly used onion services with alternative services, and this continues to be an excellent choice. Now, there is also an option for websites that want their users to know about their onion service to invite them to opt-in to use their .onion address. + +### What is new? + +**Onion Location** +Website publishers now can advertise their onion service to Tor users by adding an HTTP header. When visiting a website that has both an .onion address and Onion Location enabled via Tor Browser, users will be prompted about the onion service version of the site and will be asked to opt-in to upgrade to the onion service on their first use. + +**Onion Authentication** +Onion services administrators who want to add an extra layer of security to their website can now set a pair of keys for access control and authentication. Tor Browser users can save keys and manage them via about:preferences#privacy in the Onion Services Authentication section. + +**Improved URL Bar Security Indicators** +Browsers traditionally rendered sites delivered via a secure transport protocol with a green lock icon. But in mid-2019, the formerly green lock icon became gray, intending to de-emphasize the default (safe) connection state and instead of putting more emphasis on broken or insecure connections. Major browsers as Firefox and Chrome understood that it is a benefit for the entire user base if they deploy familiar experiences for both users. We are following Firefox on this decision, and have we updated Tor Browser security indicators to make it easier for users to understand when they are visiting an non-secure website. + +**Error pages for onion services** +Sometimes users have a hard time reaching onion sites. In previous version of Tor Browser, when there was an error connecting to an onion service, users received a standard Firefox error message, with no information about why they were unable to connect to the onion site. + +In this release, we have improved the way Tor Browser communicates with users about service-, client-, and network-side errors that might happpen when they are trying to visit an onion service. Tor Browser now displays a simplified diagram of the connection and shows where the error occured. We want these messages to be clear and informative without being overwhelming. + +**Onion Names** +Because of cryptographic protections, onion service URLs are not easy for humans to remember (ie, torproject.org vs. expyuzz4wqqyqhjn.onion). This makes it hard for users to discover or return to an onion site. We found that organically, developers have approached this problem in different ways, mostly with solutions tailored for their service. Given that there is no solution that works perfectly for all our user groups, we also approached this problem from a broad angle. For this release, we partnered with the [Freedom of the Press Foundation](https://freedom.press/) and [HTTPS Everywhere](https://www.eff.org/https-everywhere) to develop the first proof-of-concept for human-memorable names for onion services addresses. + +**Known Issues** +Tor Browser 9.5 comes with a number of known issues. The most important ones are: + +**Give Feedback** +If you find a bug or have a suggestion for how we could improve this release, please let us know. Thanks to all of the teams across Tor, and the many volunteers, who contributed to this release. + +**Full Changelog** +The full changelog since Tor Browser 9.0.10 is: + + * All Platforms + * Update Firefox to 68.9.0esr + * Update HTTPS-Everywhere to 2020.5.20 + * Update NoScript to 11.0.26 + * Update Tor to 0.4.3.5 + * Translations update + * Bug 21549: Disable wasm for now until it is properly audited + * Bug 27268: Preferences clean-up in Torbutton code + * Bug 28745: Remove torbutton.js unused code + * Bug 28746: Remove torbutton isolation and fp prefs sync + * Bug 30237: Control port module improvements for v3 client authentication + * Bug 30786: Add th locale + * Bug 30787: Add lt locale + * Bug 30788: Add ms locale + * Bug 30851: Move default preferences to 000-tor-browser.js + * Bug 30888: move torbutton_util.js to modules/utils.js + * Bug 31134: Govern graphite again by security settings + * Bug 31395: Remove inline script in aboutTor.xhtml + * Bug 31499: Update libevent to 2.1.11-stable + * Bug 33877: Disable Samples and Regression tests For Libevent Build + * Bug 31573: Catch SessionStore.jsm exception + * Bug 32318: Backport Mozilla's fix for bug 1534339 + * Bug 32414: Make Services.search.addEngine obey FPI + * Bug 32493: Disable MOZ_SERVICES_HEALTHREPORT + * Bug 32618: Backport fixes from Mozilla bugs 1467970 and 1590526 + * Bug 33342: Avoid disconnect search addon error after removal + * Bug 33726: Fix patch for #23247: Communicating security expectations for .onion + * Bug 34157: Backport fix for Mozilla Bug 1511941 + * Windows + OS X + Linux + * Update Tor Launcher to 0.2.21.8 + * Translations update + * Bug 19757: Support on-disk storage of v3 client auth keys + * Bug 30237: Add v3 onion services client authentication prompt + * Bug 30786: Add th locale + * Bug 30787: Add lt locale + * Bug 30788: Add ms locale + * Bug 33514: non-en-US Tor Browser 9.5a6 won't start up + * Bug 19251: Show improved error pages for onion service errors + * Bug 19757: Support on-disk storage of v3 client auth keys + * Bug 21952: Implement Onion-Location + * Bug 27604: Fix broken Tor Browser after moving it to a different directory + * Bug 28005: Implement .onion alias urlbar rewrites + * Bug 30237: Improve TBB UI of hidden service client authorization + * Bug 32076: Upgrade to goptlib v1.1.0 + * Bug 32220: Improve the letterboxing experience + * Bug 32418: Allow updates to be disabled via an enterprise policy. + * Bug 32470: Backport fix for bug 1590538 + * Bug 32645: Update URL bar onion indicators + * Bug 32658: Create a new MAR signing key + * Bug 32674: Point the about:tor "Get involved" link to the community portal + * Bug 32767: Remove Disconnect search + * Bug 33698: Update "About Tor Browser" links in Tor Browser + * Bug 33707: Swap out onion icon in circuit display with new one + * Bug 34032: Use Securedrop's Official https-everywhere ruleset + * Bug 34196: Update site info URL with the onion name + * Bug 34321: Add Learn More onboarding item + * Windows + * Bug 22919: Improve the random number generator for the boundaries in multipart/form-data + * Bug 29614: Use SHA-256 algorithm for Windows timestamping + * Bug 33113: Bump NSIS version to 3.05 + * OS X + * Bug 32505: Tighten our rules in our entitlements file for macOS + * Linux + * Bug 34315: Avoid reading policies from /etc/firefox on Linux + * Android + * Bug 26529: Notify user about possible proxy-bypass before opening external app + * Bug 30767: Custom obfs4 bridge does not work on Tor Browser for Android + * Bug 32303: Obfs4 is broken on Android Q + * Bug 33359: Use latest Version of TOPL and Remove Patches + * Bug 33931: obfs4 bridges are used instead of meek if meek is selected in Tor Browser for Android alpha + * Build System + * All Platforms + * Go to 1.13.11 + * Bug 33380: Add *.json to sha256sums-unsigned-build.txt + * Windows + * Bug 33802: --enable-secure-api is not supported anymore in mingw-w64 + * Linux + * Bug 32976: Build and bundle geckodriver + * Bug 34242: Fix creation of Linux containers + * Android + * Bug 28765: LibEvent Build for Android + * Bug 28766: Tor Build for Android + * Bug 28803: Integrate building Pluggable Transports for Android + * Bug 30461: Clean up tor-android-service project + * Bug 32993: Package Tor With Tor Android Service Project + * Bug 33685: Add Support for Building zlib for Android diff --git a/templates/new-release.html b/templates/new-release.html index f695b54b..dd0f770a 100644 --- a/templates/new-release.html +++ b/templates/new-release.html @@ -1,19 +1,40 @@ -<div class="row"> +{% include 'meta.html' %} + <div class="page pt-4"> + {% include 'header.html' %} + <div class="container-fluid"> + <div class="row flex-xl-nowrap"> + {% set locale = bag('alternatives', this.alt) %} + <main role="main" class="mx-auto col-12 {{ locale.order }} {{ locale.direction }}"> - <div class="container py-3 mt-5 content"> - <div class="col-sm-9"> - {% for item in this.children %} - <a href="{{ item.path|url }}">{{ item.title }}</a> - {% endfor %} - </div> - <div class="card mt-5"> - <ul class="list-group list-group-flush"> -  - <li class="list-group-item"> - <a href="{{ this.parent|url }}">{{ _("Back to previous page: ") }}{{ this.parent.title }}</a> - <a href="https://github.com/torproject/community/edit/master/content{{ this.path }}/contents.lr">{{ _("Edit this page") }}</a> - </li> - </ul> + + <div class="container py-3 mt-5 content"> + + <div class="col-sm-9"> + {% block body %} + {{ this.body }} + {% endblock %} + </div> + + <div class="card mt-5"> + <ul class="list-group list-group-flush"> +  + <li class="list-group-item"> + <a href="{{ this.parent|url }}">{{ _("Back to previous page: ") }}{{ this.parent.title }}</a> - <a href="https://github.com/torproject/community/edit/master/content{{ this.path }}/contents.lr">{{ _("Edit this page") }}</a> + </li> + </ul> + </div> + + </div> + + + </main> + </div> </div> </div> - -</div> + {% if this.section == "Download" %} + {% include 'footer-min.html' %} + {% else %} + {% include 'footer.html' %} + {% endif %} +</body> +</html>

1 0

[tor/master] Man page: MinUptimeHidServDirectoryV2 defaults to 96 hours
by nickm＠torproject.org 01 Jun '20

01 Jun '20

commit d6186c7435d64cad9b516f4ee35db7fdbd8b91e7 Author: Roger Dingledine <arma(a)torproject.org> Date: Sat May 23 04:27:56 2020 -0400 Man page: MinUptimeHidServDirectoryV2 defaults to 96 hours Bugfix on 0.2.6.3-alpha; fixes bug 34299. --- changes/bug34299 | 3 +++ doc/tor.1.txt | 4 ++-- 2 files changed, 5 insertions(+), 2 deletions(-) diff --git a/changes/bug34299 b/changes/bug34299 new file mode 100644 index 000000000..464cf0d18 --- /dev/null +++ b/changes/bug34299 @@ -0,0 +1,3 @@ + o Minor bugfixes (man page): + - Update the man page to reflect that MinUptimeHidServDirectoryV2 + defaults to 96 hours. Fixes bug 34299; bugfix on 0.2.6.3-alpha. diff --git a/doc/tor.1.txt b/doc/tor.1.txt index b2014842c..88cf47f2f 100644 --- a/doc/tor.1.txt +++ b/doc/tor.1.txt @@ -2907,8 +2907,8 @@ on the public Tor network. networkstatus documents rather than generating its own. (Default: 0) [[MinUptimeHidServDirectoryV2]] **MinUptimeHidServDirectoryV2** __N__ **seconds**|**minutes**|**hours**|**days**|**weeks**:: - Minimum uptime of a v2 hidden service directory to be accepted as such by - authoritative directories. (Default: 25 hours) + Minimum uptime of a relay to be accepted as a hidden service directory + by directory authorities. (Default: 96 hours) [[RecommendedServerVersions]] **RecommendedServerVersions** __STRING__:: STRING is a comma-separated list of Tor versions currently believed to be

1 0

[tor/maint-0.4.3] Merge remote-tracking branch 'tor-github/pr/1905/head' into maint-0.4.3
by nickm＠torproject.org 01 Jun '20

01 Jun '20

commit 688d1b3f032b5a84ad5ada23fa8831c07bd76c75 Merge: 6891d1bbc d6186c743 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Jun 1 09:47:37 2020 -0400 Merge remote-tracking branch 'tor-github/pr/1905/head' into maint-0.4.3 changes/bug34299 | 3 +++ doc/tor.1.txt | 4 ++-- 2 files changed, 5 insertions(+), 2 deletions(-)

1 0

[tor/master] Merge branch 'maint-0.4.3'
by nickm＠torproject.org 01 Jun '20

01 Jun '20

commit b6e60f26dd04fa4f2ae8020b4148147380b6d28b Merge: 5922087ea 688d1b3f0 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Jun 1 09:48:56 2020 -0400 Merge branch 'maint-0.4.3' changes/bug34299 | 3 +++ doc/tor.1.txt | 4 ++-- 2 files changed, 5 insertions(+), 2 deletions(-) diff --cc doc/tor.1.txt index 3dd7f5a64,88cf47f2f..7b3150e2a --- a/doc/tor.1.txt +++ b/doc/tor.1.txt @@@ -3014,54 -3007,19 +3014,54 @@@ on the public Tor network and their target user audience can periodically fetch the list of available community bridges to stay up-to-date. (Default: not set) -[[V3AuthVotingInterval]] **V3AuthVotingInterval** __N__ **minutes**|**hours**:: - V3 authoritative directories only. Configures the server's preferred voting - interval. Note that voting will __actually__ happen at an interval chosen - by consensus from all the authorities' preferred intervals. This time - SHOULD divide evenly into a day. (Default: 1 hour) +[[ConsensusParams]] **ConsensusParams** __STRING__:: + STRING is a space-separated list of key=value pairs that Tor will include + in the "params" line of its networkstatus vote. -[[V3AuthVoteDelay]] **V3AuthVoteDelay** __N__ **minutes**|**hours**:: - V3 authoritative directories only. Configures the server's preferred delay - between publishing its vote and assuming it has all the votes from all the - other authorities. Note that the actual time used is not the server's - preferred time, but the consensus of all preferences. (Default: 5 minutes) +[[DirAllowPrivateAddresses]] **DirAllowPrivateAddresses** **0**|**1**:: + If set to 1, Tor will accept server descriptors with arbitrary "Address" + elements. Otherwise, if the address is not an IP address or is a private IP + address, it will reject the server descriptor. Additionally, Tor + will allow exit policies for private networks to fulfill Exit flag + requirements. (Default: 0) + +[[GuardfractionFile]] **GuardfractionFile** __FILENAME__:: + V3 authoritative directories only. Configures the location of the + guardfraction file which contains information about how long relays + have been guards. (Default: unset) -[[V3AuthDistDelay]] **V3AuthDistDelay** __N__ **minutes**|**hours**:: +[[MinMeasuredBWsForAuthToIgnoreAdvertised]] **MinMeasuredBWsForAuthToIgnoreAdvertised** __N__:: + A total value, in abstract bandwidth units, describing how much + measured total bandwidth an authority should have observed on the network + before it will treat advertised bandwidths as wholly + unreliable. (Default: 500) + +[[MinUptimeHidServDirectoryV2]] **MinUptimeHidServDirectoryV2** __N__ **seconds**|**minutes**|**hours**|**days**|**weeks**:: - Minimum uptime of a v2 hidden service directory to be accepted as such by - authoritative directories. (Default: 25 hours) ++ Minimum uptime of a relay to be accepted as a hidden service directory ++ by directory authorities. (Default: 96 hours) + +[[RecommendedClientVersions]] **RecommendedClientVersions** __STRING__:: + STRING is a comma-separated list of Tor versions currently believed to be + safe for clients to use. This information is included in version 2 + directories. If this is not set then the value of **RecommendedVersions** + is used. When this is set then **VersioningAuthoritativeDirectory** should + be set too. + +[[RecommendedServerVersions]] **RecommendedServerVersions** __STRING__:: + STRING is a comma-separated list of Tor versions currently believed to be + safe for servers to use. This information is included in version 2 + directories. If this is not set then the value of **RecommendedVersions** + is used. When this is set then **VersioningAuthoritativeDirectory** should + be set too. + +[[RecommendedVersions]] **RecommendedVersions** __STRING__:: + STRING is a comma-separated list of Tor versions currently believed to be + safe. The list is included in each directory, and nodes which pull down the + directory learn whether they need to upgrade. This option can appear + multiple times: the values from multiple lines are spliced together. When + this is set then **VersioningAuthoritativeDirectory** should be set too. + +[[V3AuthDistDelay]] **V3AuthDistDelay** __N__ **seconds**|**minutes**|**hours**:: V3 authoritative directories only. Configures the server's preferred delay between publishing its consensus and signature and assuming it has all the signatures from all the other authorities. Note that the actual time used

1 0