tor-commits July 2020

tor-commits@lists.torproject.org

17 participants
2100 discussions

[tpo/staging] Add content for TB9.5 release
by gus＠torproject.org 20 Jul '20

20 Jul '20

commit 7800bf9b89760d14e1744264bfa98d2b5d374730 Author: Antonela <hola(a)antonela.me> Date: Mon Jun 1 14:55:05 2020 -0300 Add content for TB9.5 release The template is broken. Working on fixing it. --- content/releases/contents.lr | 2 +- content/releases/tor-browser-95/contents.lr | 52 -------- content/releases/tor-browser/contents.lr | 11 ++ .../tor-browser/tor-browser-95/contents.lr | 132 +++++++++++++++++++++ templates/release.html | 29 +++-- 5 files changed, 158 insertions(+), 68 deletions(-) diff --git a/content/releases/contents.lr b/content/releases/contents.lr index 88c1eeb3..b8a1c693 100644 --- a/content/releases/contents.lr +++ b/content/releases/contents.lr @@ -6,6 +6,6 @@ html: releases.html --- color: primary --- -title: Tor Browser +title: Releases --- body: diff --git a/content/releases/tor-browser-95/contents.lr b/content/releases/tor-browser-95/contents.lr deleted file mode 100644 index a6afb375..00000000 --- a/content/releases/tor-browser-95/contents.lr +++ /dev/null @@ -1,52 +0,0 @@ -section: What is new ---- -template: layout.html ---- -html: release.html ---- -color: primary ---- -title: Tor Browser 9.5 ---- -body: - -Tor Browser 9.5a12 is now available from the Tor Browser Alpha download page and also from our distribution directory. - -Note: This is an alpha release, an experimental version for users who want to help us test new features. For everyone else, we recommend downloading the latest stable release instead.This release updates Firefox to 68.8.0esr, NoScript to 11.0.25, OpenSSL to 1.1.1g, and Tor to 0.4.3.4-rc. In addition, the Android Tor Browser now includes Tor built using the reproducible build system. - -Also, this release features important security updates to Firefox. - -The full changelog since Tor Browser 9.5a11 is: - - All Platforms - Update Firefox to 68.8.0esr - Bump NoScript to 11.0.25 - Bump Tor to 0.4.3.4-rc - Translations update - Bug 31499: Update libevent to 2.1.11-stable - Bug 33877: Disable Samples and Regression tests For Libevent Build - Bug 33630: Remove noisebridge01 default bridge - Bug 33726: Fix patch for #23247: Communicating security expectations for .onion - Bug 34017: Bump openssl version to 1.1.1g - Bug 33698: Update "About Tor Browser" links in Tor Browser - Windows + OS X + Linux - Update Tor Launcher to 0.2.21.6 - Translations update - Bug 33576: Update pion-webrtc version to 2.2.3 - Bug 32418: Allow updates to be disabled via an enterprise policy. - Bug 34032: Use Securedrop's Official https-everywhere ruleset - Windows - Bug 29614: Use SHA-256 algorithm for Windows timestamping - Android - Bug 33359: Use latest Version of TOPL and Remove Patches - Bug 33931: obfs4 bridges are used instead of meek if meek is selected in Tor Browser for Android alpha - Build System - All Platforms - Bug 32027: Bump Go to 1.13.10 - Android - Bug 28765: LibEvent Build for Android - Bug 28766: Tor Build for Android - Bug 32993: Package Tor With Tor Android Service Project - Bug 33685: Add Support for Building zlib for Android - Windows - Bug 33802: --enable-secure-api is not supported anymore in mingw-w64 diff --git a/content/releases/tor-browser/contents.lr b/content/releases/tor-browser/contents.lr new file mode 100644 index 00000000..b85e3323 --- /dev/null +++ b/content/releases/tor-browser/contents.lr @@ -0,0 +1,11 @@ +section: What is new +--- +template: layout.html +--- +html: releases.html +--- +color: primary +--- +title: Tor Browser Releases +--- +body: diff --git a/content/releases/tor-browser/tor-browser-95/contents.lr b/content/releases/tor-browser/tor-browser-95/contents.lr new file mode 100644 index 00000000..5188e689 --- /dev/null +++ b/content/releases/tor-browser/tor-browser-95/contents.lr @@ -0,0 +1,132 @@ +section: What is new +--- +html: release.html +--- +color: primary +--- +title: Tor Browser 9.5 +--- +body: + +## Tor Browser 9.5 is now available from the Tor Browser download page and from our distribution directory. The Android version is also available from Google Play and should be available from F-Droid within the next day. + +This new Tor Browser release is focused on helping users understand onion services. + +Tor's onion routing remains the best way to achieve end-to-end anonymous communication on the Internet. With onion services (.onion addresses), website administrators can provide their users with anonymous connections that are metadata-free or that hide metadata from any third party. Onion services are also one of the few censorship circumvention technologies that allow users to route around censorship while simultaneously protecting their privacy and identity. + +For the first time, Tor Browser users will be able to opt-in for using onion sites automatically whenever the website makes them available. For years, some websites have invisibly used onion services with alternative services, and this continues to be an excellent choice. Now, there is also an option for websites that want their users to know about their onion service to invite them to opt-in to use their .onion address. + +### What is new? + +**Onion Location** +Website publishers now can advertise their onion service to Tor users by adding an HTTP header. When visiting a website that has both an .onion address and Onion Location enabled via Tor Browser, users will be prompted about the onion service version of the site and will be asked to opt-in to upgrade to the onion service on their first use. + +**Onion Authentication** +Onion services administrators who want to add an extra layer of security to their website can now set a pair of keys for access control and authentication. Tor Browser users can save keys and manage them via about:preferences#privacy in the Onion Services Authentication section. + +**Improved URL Bar Security Indicators** +Browsers traditionally rendered sites delivered via a secure transport protocol with a green lock icon. But in mid-2019, the formerly green lock icon became gray, intending to de-emphasize the default (safe) connection state and instead of putting more emphasis on broken or insecure connections. Major browsers as Firefox and Chrome understood that it is a benefit for the entire user base if they deploy familiar experiences for both users. We are following Firefox on this decision, and have we updated Tor Browser security indicators to make it easier for users to understand when they are visiting an non-secure website. + +**Error pages for onion services** +Sometimes users have a hard time reaching onion sites. In previous version of Tor Browser, when there was an error connecting to an onion service, users received a standard Firefox error message, with no information about why they were unable to connect to the onion site. + +In this release, we have improved the way Tor Browser communicates with users about service-, client-, and network-side errors that might happpen when they are trying to visit an onion service. Tor Browser now displays a simplified diagram of the connection and shows where the error occured. We want these messages to be clear and informative without being overwhelming. + +**Onion Names** +Because of cryptographic protections, onion service URLs are not easy for humans to remember (ie, torproject.org vs. expyuzz4wqqyqhjn.onion). This makes it hard for users to discover or return to an onion site. We found that organically, developers have approached this problem in different ways, mostly with solutions tailored for their service. Given that there is no solution that works perfectly for all our user groups, we also approached this problem from a broad angle. For this release, we partnered with the [Freedom of the Press Foundation](https://freedom.press/) and [HTTPS Everywhere](https://www.eff.org/https-everywhere) to develop the first proof-of-concept for human-memorable names for onion services addresses. + +**Known Issues** +Tor Browser 9.5 comes with a number of known issues. The most important ones are: + +**Give Feedback** +If you find a bug or have a suggestion for how we could improve this release, please let us know. Thanks to all of the teams across Tor, and the many volunteers, who contributed to this release. + +**Full Changelog** +The full changelog since Tor Browser 9.0.10 is: + + * All Platforms + * Update Firefox to 68.9.0esr + * Update HTTPS-Everywhere to 2020.5.20 + * Update NoScript to 11.0.26 + * Update Tor to 0.4.3.5 + * Translations update + * Bug 21549: Disable wasm for now until it is properly audited + * Bug 27268: Preferences clean-up in Torbutton code + * Bug 28745: Remove torbutton.js unused code + * Bug 28746: Remove torbutton isolation and fp prefs sync + * Bug 30237: Control port module improvements for v3 client authentication + * Bug 30786: Add th locale + * Bug 30787: Add lt locale + * Bug 30788: Add ms locale + * Bug 30851: Move default preferences to 000-tor-browser.js + * Bug 30888: move torbutton_util.js to modules/utils.js + * Bug 31134: Govern graphite again by security settings + * Bug 31395: Remove inline script in aboutTor.xhtml + * Bug 31499: Update libevent to 2.1.11-stable + * Bug 33877: Disable Samples and Regression tests For Libevent Build + * Bug 31573: Catch SessionStore.jsm exception + * Bug 32318: Backport Mozilla's fix for bug 1534339 + * Bug 32414: Make Services.search.addEngine obey FPI + * Bug 32493: Disable MOZ_SERVICES_HEALTHREPORT + * Bug 32618: Backport fixes from Mozilla bugs 1467970 and 1590526 + * Bug 33342: Avoid disconnect search addon error after removal + * Bug 33726: Fix patch for #23247: Communicating security expectations for .onion + * Bug 34157: Backport fix for Mozilla Bug 1511941 + * Windows + OS X + Linux + * Update Tor Launcher to 0.2.21.8 + * Translations update + * Bug 19757: Support on-disk storage of v3 client auth keys + * Bug 30237: Add v3 onion services client authentication prompt + * Bug 30786: Add th locale + * Bug 30787: Add lt locale + * Bug 30788: Add ms locale + * Bug 33514: non-en-US Tor Browser 9.5a6 won't start up + * Bug 19251: Show improved error pages for onion service errors + * Bug 19757: Support on-disk storage of v3 client auth keys + * Bug 21952: Implement Onion-Location + * Bug 27604: Fix broken Tor Browser after moving it to a different directory + * Bug 28005: Implement .onion alias urlbar rewrites + * Bug 30237: Improve TBB UI of hidden service client authorization + * Bug 32076: Upgrade to goptlib v1.1.0 + * Bug 32220: Improve the letterboxing experience + * Bug 32418: Allow updates to be disabled via an enterprise policy. + * Bug 32470: Backport fix for bug 1590538 + * Bug 32645: Update URL bar onion indicators + * Bug 32658: Create a new MAR signing key + * Bug 32674: Point the about:tor "Get involved" link to the community portal + * Bug 32767: Remove Disconnect search + * Bug 33698: Update "About Tor Browser" links in Tor Browser + * Bug 33707: Swap out onion icon in circuit display with new one + * Bug 34032: Use Securedrop's Official https-everywhere ruleset + * Bug 34196: Update site info URL with the onion name + * Bug 34321: Add Learn More onboarding item + * Windows + * Bug 22919: Improve the random number generator for the boundaries in multipart/form-data + * Bug 29614: Use SHA-256 algorithm for Windows timestamping + * Bug 33113: Bump NSIS version to 3.05 + * OS X + * Bug 32505: Tighten our rules in our entitlements file for macOS + * Linux + * Bug 34315: Avoid reading policies from /etc/firefox on Linux + * Android + * Bug 26529: Notify user about possible proxy-bypass before opening external app + * Bug 30767: Custom obfs4 bridge does not work on Tor Browser for Android + * Bug 32303: Obfs4 is broken on Android Q + * Bug 33359: Use latest Version of TOPL and Remove Patches + * Bug 33931: obfs4 bridges are used instead of meek if meek is selected in Tor Browser for Android alpha + * Build System + * All Platforms + * Go to 1.13.11 + * Bug 33380: Add *.json to sha256sums-unsigned-build.txt + * Windows + * Bug 33802: --enable-secure-api is not supported anymore in mingw-w64 + * Linux + * Bug 32976: Build and bundle geckodriver + * Bug 34242: Fix creation of Linux containers + * Android + * Bug 28765: LibEvent Build for Android + * Bug 28766: Tor Build for Android + * Bug 28803: Integrate building Pluggable Transports for Android + * Bug 30461: Clean up tor-android-service project + * Bug 32993: Package Tor With Tor Android Service Project + * Bug 33685: Add Support for Building zlib for Android diff --git a/templates/release.html b/templates/release.html index f695b54b..75c2cb4b 100644 --- a/templates/release.html +++ b/templates/release.html @@ -1,19 +1,18 @@ -<div class="row"> +<div class="container py-3 mt-5 content"> - <div class="container py-3 mt-5 content"> - <div class="col-sm-9"> - {% for item in this.children %} - <a href="{{ item.path|url }}">{{ item.title }}</a> - {% endfor %} - </div> - <div class="card mt-5"> - <ul class="list-group list-group-flush"> -  - <li class="list-group-item"> - <a href="{{ this.parent|url }}">{{ _("Back to previous page: ") }}{{ this.parent.title }}</a> - <a href="https://github.com/torproject/community/edit/master/content{{ this.path }}/contents.lr">{{ _("Edit this page") }}</a> - </li> - </ul> - </div> + <div class="col-sm-9"> + {% block body %} + {{ this.body }} + {% endblock %} + </div> + + <div class="card mt-5"> + <ul class="list-group list-group-flush"> +  + <li class="list-group-item"> + <a href="{{ this.parent|url }}">{{ _("Back to previous page: ") }}{{ this.parent.title }}</a> - <a href="https://github.com/torproject/community/edit/master/content{{ this.path }}/contents.lr">{{ _("Edit this page") }}</a> + </li> + </ul> </div> </div>

1 0

[tpo/staging] Update content
by gus＠torproject.org 20 Jul '20

20 Jul '20

commit 8e2322b594e603e2494644480b9d7b544422a1ae Author: Antonela <hola(a)antonela.me> Date: Mon Jun 1 15:16:48 2020 -0300 Update content The template is working now \o/ --- .../tor-browser/tor-browser-95/contents.lr | 99 ++-------------------- templates/release.html | 50 +++++++---- 2 files changed, 43 insertions(+), 106 deletions(-) diff --git a/content/releases/tor-browser/tor-browser-95/contents.lr b/content/releases/tor-browser/tor-browser-95/contents.lr index 5188e689..83c5713a 100644 --- a/content/releases/tor-browser/tor-browser-95/contents.lr +++ b/content/releases/tor-browser/tor-browser-95/contents.lr @@ -1,6 +1,6 @@ section: What is new --- -html: release.html +_template: release.html --- color: primary --- @@ -19,114 +19,31 @@ For the first time, Tor Browser users will be able to opt-in for using onion sit ### What is new? **Onion Location** + Website publishers now can advertise their onion service to Tor users by adding an HTTP header. When visiting a website that has both an .onion address and Onion Location enabled via Tor Browser, users will be prompted about the onion service version of the site and will be asked to opt-in to upgrade to the onion service on their first use. **Onion Authentication** + Onion services administrators who want to add an extra layer of security to their website can now set a pair of keys for access control and authentication. Tor Browser users can save keys and manage them via about:preferences#privacy in the Onion Services Authentication section. **Improved URL Bar Security Indicators** + Browsers traditionally rendered sites delivered via a secure transport protocol with a green lock icon. But in mid-2019, the formerly green lock icon became gray, intending to de-emphasize the default (safe) connection state and instead of putting more emphasis on broken or insecure connections. Major browsers as Firefox and Chrome understood that it is a benefit for the entire user base if they deploy familiar experiences for both users. We are following Firefox on this decision, and have we updated Tor Browser security indicators to make it easier for users to understand when they are visiting an non-secure website. **Error pages for onion services** + Sometimes users have a hard time reaching onion sites. In previous version of Tor Browser, when there was an error connecting to an onion service, users received a standard Firefox error message, with no information about why they were unable to connect to the onion site. In this release, we have improved the way Tor Browser communicates with users about service-, client-, and network-side errors that might happpen when they are trying to visit an onion service. Tor Browser now displays a simplified diagram of the connection and shows where the error occured. We want these messages to be clear and informative without being overwhelming. **Onion Names** + Because of cryptographic protections, onion service URLs are not easy for humans to remember (ie, torproject.org vs. expyuzz4wqqyqhjn.onion). This makes it hard for users to discover or return to an onion site. We found that organically, developers have approached this problem in different ways, mostly with solutions tailored for their service. Given that there is no solution that works perfectly for all our user groups, we also approached this problem from a broad angle. For this release, we partnered with the [Freedom of the Press Foundation](https://freedom.press/) and [HTTPS Everywhere](https://www.eff.org/https-everywhere) to develop the first proof-of-concept for human-memorable names for onion services addresses. **Known Issues** + Tor Browser 9.5 comes with a number of known issues. The most important ones are: **Give Feedback** -If you find a bug or have a suggestion for how we could improve this release, please let us know. Thanks to all of the teams across Tor, and the many volunteers, who contributed to this release. -**Full Changelog** -The full changelog since Tor Browser 9.0.10 is: - - * All Platforms - * Update Firefox to 68.9.0esr - * Update HTTPS-Everywhere to 2020.5.20 - * Update NoScript to 11.0.26 - * Update Tor to 0.4.3.5 - * Translations update - * Bug 21549: Disable wasm for now until it is properly audited - * Bug 27268: Preferences clean-up in Torbutton code - * Bug 28745: Remove torbutton.js unused code - * Bug 28746: Remove torbutton isolation and fp prefs sync - * Bug 30237: Control port module improvements for v3 client authentication - * Bug 30786: Add th locale - * Bug 30787: Add lt locale - * Bug 30788: Add ms locale - * Bug 30851: Move default preferences to 000-tor-browser.js - * Bug 30888: move torbutton_util.js to modules/utils.js - * Bug 31134: Govern graphite again by security settings - * Bug 31395: Remove inline script in aboutTor.xhtml - * Bug 31499: Update libevent to 2.1.11-stable - * Bug 33877: Disable Samples and Regression tests For Libevent Build - * Bug 31573: Catch SessionStore.jsm exception - * Bug 32318: Backport Mozilla's fix for bug 1534339 - * Bug 32414: Make Services.search.addEngine obey FPI - * Bug 32493: Disable MOZ_SERVICES_HEALTHREPORT - * Bug 32618: Backport fixes from Mozilla bugs 1467970 and 1590526 - * Bug 33342: Avoid disconnect search addon error after removal - * Bug 33726: Fix patch for #23247: Communicating security expectations for .onion - * Bug 34157: Backport fix for Mozilla Bug 1511941 - * Windows + OS X + Linux - * Update Tor Launcher to 0.2.21.8 - * Translations update - * Bug 19757: Support on-disk storage of v3 client auth keys - * Bug 30237: Add v3 onion services client authentication prompt - * Bug 30786: Add th locale - * Bug 30787: Add lt locale - * Bug 30788: Add ms locale - * Bug 33514: non-en-US Tor Browser 9.5a6 won't start up - * Bug 19251: Show improved error pages for onion service errors - * Bug 19757: Support on-disk storage of v3 client auth keys - * Bug 21952: Implement Onion-Location - * Bug 27604: Fix broken Tor Browser after moving it to a different directory - * Bug 28005: Implement .onion alias urlbar rewrites - * Bug 30237: Improve TBB UI of hidden service client authorization - * Bug 32076: Upgrade to goptlib v1.1.0 - * Bug 32220: Improve the letterboxing experience - * Bug 32418: Allow updates to be disabled via an enterprise policy. - * Bug 32470: Backport fix for bug 1590538 - * Bug 32645: Update URL bar onion indicators - * Bug 32658: Create a new MAR signing key - * Bug 32674: Point the about:tor "Get involved" link to the community portal - * Bug 32767: Remove Disconnect search - * Bug 33698: Update "About Tor Browser" links in Tor Browser - * Bug 33707: Swap out onion icon in circuit display with new one - * Bug 34032: Use Securedrop's Official https-everywhere ruleset - * Bug 34196: Update site info URL with the onion name - * Bug 34321: Add Learn More onboarding item - * Windows - * Bug 22919: Improve the random number generator for the boundaries in multipart/form-data - * Bug 29614: Use SHA-256 algorithm for Windows timestamping - * Bug 33113: Bump NSIS version to 3.05 - * OS X - * Bug 32505: Tighten our rules in our entitlements file for macOS - * Linux - * Bug 34315: Avoid reading policies from /etc/firefox on Linux - * Android - * Bug 26529: Notify user about possible proxy-bypass before opening external app - * Bug 30767: Custom obfs4 bridge does not work on Tor Browser for Android - * Bug 32303: Obfs4 is broken on Android Q - * Bug 33359: Use latest Version of TOPL and Remove Patches - * Bug 33931: obfs4 bridges are used instead of meek if meek is selected in Tor Browser for Android alpha - * Build System - * All Platforms - * Go to 1.13.11 - * Bug 33380: Add *.json to sha256sums-unsigned-build.txt - * Windows - * Bug 33802: --enable-secure-api is not supported anymore in mingw-w64 - * Linux - * Bug 32976: Build and bundle geckodriver - * Bug 34242: Fix creation of Linux containers - * Android - * Bug 28765: LibEvent Build for Android - * Bug 28766: Tor Build for Android - * Bug 28803: Integrate building Pluggable Transports for Android - * Bug 30461: Clean up tor-android-service project - * Bug 32993: Package Tor With Tor Android Service Project - * Bug 33685: Add Support for Building zlib for Android +If you find a bug or have a suggestion for how we could improve this release, please let us know. Thanks to all of the teams across Tor, and the many volunteers, who contributed to this release. diff --git a/templates/release.html b/templates/release.html index 75c2cb4b..9200ebd4 100644 --- a/templates/release.html +++ b/templates/release.html @@ -1,18 +1,38 @@ -<div class="container py-3 mt-5 content"> +{% include 'meta.html' %} + <div class="page pt-4"> + {% include 'header.html' %} + <div class="container-fluid"> + <div class="row flex-xl-nowrap"> + {% set locale = bag('alternatives', this.alt) %} + <main role="main" class="mx-auto col-12 {{ locale.order }} {{ locale.direction }}"> - <div class="col-sm-9"> - {% block body %} - {{ this.body }} - {% endblock %} - </div> + <div class="container py-3 mt-5 content"> - <div class="card mt-5"> - <ul class="list-group list-group-flush"> -  - <li class="list-group-item"> - <a href="{{ this.parent|url }}">{{ _("Back to previous page: ") }}{{ this.parent.title }}</a> - <a href="https://github.com/torproject/community/edit/master/content{{ this.path }}/contents.lr">{{ _("Edit this page") }}</a> - </li> - </ul> - </div> + <div class="col-sm-9"> + {% block body %} + {{ this.body }} + {% endblock %} + </div> + + <div class="card mt-5"> + <ul class="list-group list-group-flush"> +  + <li class="list-group-item"> + <a href="{{ this.parent|url }}">{{ _("Back to previous page: ") }}{{ this.parent.title }}</a> - <a href="https://github.com/torproject/community/edit/master/content{{ this.path }}/contents.lr">{{ _("Edit this page") }}</a> + </li> + </ul> + </div> -</div> + </div> + + </main> + </div> + </div> + </div> + {% if this.section == "Download" %} + {% include 'footer-min.html' %} + {% else %} + {% include 'footer.html' %} + {% endif %} +</body> +</html>

1 0

[tpo/staging] Fix content hierarchy
by gus＠torproject.org 20 Jul '20

20 Jul '20

commit 4066d8eb60398535d56ac151562577aba95fa48a Author: Antonela <hola(a)antonela.me> Date: Mon Jun 1 15:52:46 2020 -0300 Fix content hierarchy --- content/releases/{tor-browser => }/tor-browser-95/contents.lr | 0 content/releases/tor-browser/contents.lr | 11 ----------- 2 files changed, 11 deletions(-) diff --git a/content/releases/tor-browser/tor-browser-95/contents.lr b/content/releases/tor-browser-95/contents.lr similarity index 100% rename from content/releases/tor-browser/tor-browser-95/contents.lr rename to content/releases/tor-browser-95/contents.lr diff --git a/content/releases/tor-browser/contents.lr b/content/releases/tor-browser/contents.lr deleted file mode 100644 index b85e3323..00000000 --- a/content/releases/tor-browser/contents.lr +++ /dev/null @@ -1,11 +0,0 @@ -section: What is new ---- -template: layout.html ---- -html: releases.html ---- -color: primary ---- -title: Tor Browser Releases ---- -body:

1 0

[tpo/staging] Add images
by gus＠torproject.org 20 Jul '20

20 Jul '20

commit 4b489ee22782bfaf3ab1b3030c192e206ccdde14 Author: Antonela <hola(a)antonela.me> Date: Mon Jun 1 17:00:44 2020 -0300 Add images --- assets/static/images/tb95/onion-auth.png | Bin 0 -> 52389 bytes assets/static/images/tb95/onion-auth2.png | Bin 0 -> 79194 bytes assets/static/images/tb95/onion-auth2(a)2x.png | Bin 0 -> 270354 bytes assets/static/images/tb95/onion-auth(a)2x.png | Bin 0 -> 192867 bytes assets/static/images/tb95/onion-error.png | Bin 0 -> 86735 bytes assets/static/images/tb95/onion-error(a)2x.png | Bin 0 -> 305169 bytes .../static/images/tb95/onion-location-propublica.png | Bin 0 -> 195783 bytes .../static/images/tb95/onion-location-propublica2.png | Bin 0 -> 84147 bytes .../images/tb95/onion-location-propublica2(a)2x.png | Bin 0 -> 295176 bytes .../images/tb95/onion-location-propublica(a)2x.png | Bin 0 -> 659848 bytes assets/static/images/tb95/onion-location-riseup.png | Bin 0 -> 152691 bytes assets/static/images/tb95/onion-location-riseup(a)2x.png | Bin 0 -> 471532 bytes assets/static/images/tb95/onion-names.png | Bin 0 -> 89241 bytes assets/static/images/tb95/onion-names(a)2x.png | Bin 0 -> 306049 bytes assets/static/images/tb95/onion-url-bar-update.png | Bin 0 -> 39914 bytes assets/static/images/tb95/onion-url-bar-update(a)2x.png | Bin 0 -> 108234 bytes content/releases/tor-browser-95/contents.lr | 6 +++--- 17 files changed, 3 insertions(+), 3 deletions(-) diff --git a/assets/static/images/tb95/onion-auth.png b/assets/static/images/tb95/onion-auth.png new file mode 100644 index 00000000..28bad7e5 Binary files /dev/null and b/assets/static/images/tb95/onion-auth.png differ diff --git a/assets/static/images/tb95/onion-auth2.png b/assets/static/images/tb95/onion-auth2.png new file mode 100644 index 00000000..dbd2fe8e Binary files /dev/null and b/assets/static/images/tb95/onion-auth2.png differ diff --git a/assets/static/images/tb95/onion-auth2(a)2x.png b/assets/static/images/tb95/onion-auth2(a)2x.png new file mode 100644 index 00000000..13a920fc Binary files /dev/null and b/assets/static/images/tb95/onion-auth2(a)2x.png differ diff --git a/assets/static/images/tb95/onion-auth(a)2x.png b/assets/static/images/tb95/onion-auth(a)2x.png new file mode 100644 index 00000000..c044a1ab Binary files /dev/null and b/assets/static/images/tb95/onion-auth(a)2x.png differ diff --git a/assets/static/images/tb95/onion-error.png b/assets/static/images/tb95/onion-error.png new file mode 100644 index 00000000..484bbdd6 Binary files /dev/null and b/assets/static/images/tb95/onion-error.png differ diff --git a/assets/static/images/tb95/onion-error(a)2x.png b/assets/static/images/tb95/onion-error(a)2x.png new file mode 100644 index 00000000..c43fcb92 Binary files /dev/null and b/assets/static/images/tb95/onion-error(a)2x.png differ diff --git a/assets/static/images/tb95/onion-location-propublica.png b/assets/static/images/tb95/onion-location-propublica.png new file mode 100644 index 00000000..f694b820 Binary files /dev/null and b/assets/static/images/tb95/onion-location-propublica.png differ diff --git a/assets/static/images/tb95/onion-location-propublica2.png b/assets/static/images/tb95/onion-location-propublica2.png new file mode 100644 index 00000000..8f63278f Binary files /dev/null and b/assets/static/images/tb95/onion-location-propublica2.png differ diff --git a/assets/static/images/tb95/onion-location-propublica2(a)2x.png b/assets/static/images/tb95/onion-location-propublica2(a)2x.png new file mode 100644 index 00000000..6237f68f Binary files /dev/null and b/assets/static/images/tb95/onion-location-propublica2(a)2x.png differ diff --git a/assets/static/images/tb95/onion-location-propublica(a)2x.png b/assets/static/images/tb95/onion-location-propublica(a)2x.png new file mode 100644 index 00000000..c6ef759e Binary files /dev/null and b/assets/static/images/tb95/onion-location-propublica(a)2x.png differ diff --git a/assets/static/images/tb95/onion-location-riseup.png b/assets/static/images/tb95/onion-location-riseup.png new file mode 100644 index 00000000..ae56cf62 Binary files /dev/null and b/assets/static/images/tb95/onion-location-riseup.png differ diff --git a/assets/static/images/tb95/onion-location-riseup(a)2x.png b/assets/static/images/tb95/onion-location-riseup(a)2x.png new file mode 100644 index 00000000..813f2668 Binary files /dev/null and b/assets/static/images/tb95/onion-location-riseup(a)2x.png differ diff --git a/assets/static/images/tb95/onion-names.png b/assets/static/images/tb95/onion-names.png new file mode 100644 index 00000000..ae25af0f Binary files /dev/null and b/assets/static/images/tb95/onion-names.png differ diff --git a/assets/static/images/tb95/onion-names(a)2x.png b/assets/static/images/tb95/onion-names(a)2x.png new file mode 100644 index 00000000..6066ef5f Binary files /dev/null and b/assets/static/images/tb95/onion-names(a)2x.png differ diff --git a/assets/static/images/tb95/onion-url-bar-update.png b/assets/static/images/tb95/onion-url-bar-update.png new file mode 100644 index 00000000..0aa897dc Binary files /dev/null and b/assets/static/images/tb95/onion-url-bar-update.png differ diff --git a/assets/static/images/tb95/onion-url-bar-update(a)2x.png b/assets/static/images/tb95/onion-url-bar-update(a)2x.png new file mode 100644 index 00000000..fc4c9ea3 Binary files /dev/null and b/assets/static/images/tb95/onion-url-bar-update(a)2x.png differ diff --git a/content/releases/tor-browser-95/contents.lr b/content/releases/tor-browser-95/contents.lr index 83c5713a..6297ade1 100644 --- a/content/releases/tor-browser-95/contents.lr +++ b/content/releases/tor-browser-95/contents.lr @@ -8,9 +8,7 @@ title: Tor Browser 9.5 --- body: -## Tor Browser 9.5 is now available from the Tor Browser download page and from our distribution directory. The Android version is also available from Google Play and should be available from F-Droid within the next day. - -This new Tor Browser release is focused on helping users understand onion services. +## This new Tor Browser release is focused on helping users understand onion services. Tor's onion routing remains the best way to achieve end-to-end anonymous communication on the Internet. With onion services (.onion addresses), website administrators can provide their users with anonymous connections that are metadata-free or that hide metadata from any third party. Onion services are also one of the few censorship circumvention technologies that allow users to route around censorship while simultaneously protecting their privacy and identity. @@ -22,6 +20,8 @@ For the first time, Tor Browser users will be able to opt-in for using onion sit Website publishers now can advertise their onion service to Tor users by adding an HTTP header. When visiting a website that has both an .onion address and Onion Location enabled via Tor Browser, users will be prompted about the onion service version of the site and will be asked to opt-in to upgrade to the onion service on their first use. +![Tor Browser 9.5 Onion Location](https://blog.torproject.org/sites/default/files/styles/full_width… + **Onion Authentication** Onion services administrators who want to add an extra layer of security to their website can now set a pair of keys for access control and authentication. Tor Browser users can save keys and manage them via about:preferences#privacy in the Onion Services Authentication section.

1 0

[tpo/staging] Update content
by gus＠torproject.org 20 Jul '20

20 Jul '20

commit 8bf0e1b0bd349dd10d7c33f00ca695790d4355f2 Author: Antonela <hola(a)antonela.me> Date: Mon Jun 1 17:40:15 2020 -0300 Update content --- content/releases/tor-browser-95/contents.lr | 24 +++++++++++++++++++----- templates/release.html | 2 +- 2 files changed, 20 insertions(+), 6 deletions(-) diff --git a/content/releases/tor-browser-95/contents.lr b/content/releases/tor-browser-95/contents.lr index 6297ade1..74f51ee0 100644 --- a/content/releases/tor-browser-95/contents.lr +++ b/content/releases/tor-browser-95/contents.lr @@ -10,6 +10,7 @@ body: ## This new Tor Browser release is focused on helping users understand onion services. + Tor's onion routing remains the best way to achieve end-to-end anonymous communication on the Internet. With onion services (.onion addresses), website administrators can provide their users with anonymous connections that are metadata-free or that hide metadata from any third party. Onion services are also one of the few censorship circumvention technologies that allow users to route around censorship while simultaneously protecting their privacy and identity. For the first time, Tor Browser users will be able to opt-in for using onion sites automatically whenever the website makes them available. For years, some websites have invisibly used onion services with alternative services, and this continues to be an excellent choice. Now, there is also an option for websites that want their users to know about their onion service to invite them to opt-in to use their .onion address. @@ -20,30 +21,43 @@ For the first time, Tor Browser users will be able to opt-in for using onion sit Website publishers now can advertise their onion service to Tor users by adding an HTTP header. When visiting a website that has both an .onion address and Onion Location enabled via Tor Browser, users will be prompted about the onion service version of the site and will be asked to opt-in to upgrade to the onion service on their first use. -![Tor Browser 9.5 Onion Location](https://blog.torproject.org/sites/default/files/styles/full_width… +<img class="w-100" src="/static/images/tb95/onion-location-propublica(a)2x.png" alt="Tor Browser 9.5 Onion Location"/> + **Onion Authentication** -Onion services administrators who want to add an extra layer of security to their website can now set a pair of keys for access control and authentication. Tor Browser users can save keys and manage them via about:preferences#privacy in the Onion Services Authentication section. +Onion services administrators who want to add an extra layer of security to their website can now set a pair of keys for access control and authentication. + +<img class="w-100" src="/static/images/tb95/onion-auth(a)2x.png" alt="Tor Browser 9.5 Onion Authentication"/> + +Tor Browser users can save keys and manage them via about:preferences#privacy in the Onion Services Authentication section. + +<img class="w-100" src="/static/images/tb95/onion-auth2(a)2x.png" alt="Tor Browser 9.5 Onion Authentication"/> + **Improved URL Bar Security Indicators** Browsers traditionally rendered sites delivered via a secure transport protocol with a green lock icon. But in mid-2019, the formerly green lock icon became gray, intending to de-emphasize the default (safe) connection state and instead of putting more emphasis on broken or insecure connections. Major browsers as Firefox and Chrome understood that it is a benefit for the entire user base if they deploy familiar experiences for both users. We are following Firefox on this decision, and have we updated Tor Browser security indicators to make it easier for users to understand when they are visiting an non-secure website. +<img class="w-100" src="/static/images/tb95/onion-url-bar-update(a)2x.png" alt="Tor Browser 9.5 URL Bar Security Indicators"/> + + **Error pages for onion services** Sometimes users have a hard time reaching onion sites. In previous version of Tor Browser, when there was an error connecting to an onion service, users received a standard Firefox error message, with no information about why they were unable to connect to the onion site. In this release, we have improved the way Tor Browser communicates with users about service-, client-, and network-side errors that might happpen when they are trying to visit an onion service. Tor Browser now displays a simplified diagram of the connection and shows where the error occured. We want these messages to be clear and informative without being overwhelming. +<img class="w-100" src="/static/images/tb95/onion-error(a)2x.png" alt="Tor Browser 9.5 Error Pages for Onionsites"/> + + **Onion Names** Because of cryptographic protections, onion service URLs are not easy for humans to remember (ie, torproject.org vs. expyuzz4wqqyqhjn.onion). This makes it hard for users to discover or return to an onion site. We found that organically, developers have approached this problem in different ways, mostly with solutions tailored for their service. Given that there is no solution that works perfectly for all our user groups, we also approached this problem from a broad angle. For this release, we partnered with the [Freedom of the Press Foundation](https://freedom.press/) and [HTTPS Everywhere](https://www.eff.org/https-everywhere) to develop the first proof-of-concept for human-memorable names for onion services addresses. -**Known Issues** - -Tor Browser 9.5 comes with a number of known issues. The most important ones are: +<img class="w-100" src="/static/images/tb95/onion-names(a)2x.png" alt="Tor Browser 9.5 Onion Names"/> + **Give Feedback** If you find a bug or have a suggestion for how we could improve this release, please let us know. Thanks to all of the teams across Tor, and the many volunteers, who contributed to this release. diff --git a/templates/release.html b/templates/release.html index 9200ebd4..c1ad2f2e 100644 --- a/templates/release.html +++ b/templates/release.html @@ -6,7 +6,7 @@ {% set locale = bag('alternatives', this.alt) %} <main role="main" class="mx-auto col-12 {{ locale.order }} {{ locale.direction }}"> - <div class="container py-3 mt-5 content"> + <div class="container py-3 mt-5"> <div class="col-sm-9"> {% block body %}

1 0

[tpo/staging] Update support callout
by gus＠torproject.org 20 Jul '20

20 Jul '20

commit b56a96641deb04633481d65bc792b3797a89e5ea Author: Antonela <hola(a)antonela.me> Date: Tue Jun 2 11:31:43 2020 -0300 Update support callout - add target_blank - remove unused styles --- templates/release.html | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/templates/release.html b/templates/release.html index 1671cb60..4f47b773 100644 --- a/templates/release.html +++ b/templates/release.html @@ -18,21 +18,21 @@ <div class="col-sm-3"> - <div class="card-body h-100% w-50% text-center border"> + <div class="card-body text-center border"> <h4 class="text-primary">{{ _("Do you need help?") }}</h4> <i class="fas fa-life-ring h1 text-primary mx-auto"></i> - <div class=" pt-2" style="text-align: center;"> + <div class="pt-2"> <p class="toc-entry toc-h2 nav-item mb-0" >{{ ("See our community FAQ's") }}</p> - <a href="https://support.torproject.org" class="pt-1">{{ ("Visit Support") }}</a> + <a href="https://support.torproject.org" target="_blank" class="pt-1">{{ ("Visit Support") }}</a> </div> </div> - <div class="card-body h-100% w-50% text-center mt-4" style="background:#F2ECF4;"> + <div class="card-body text-center mt-4" style="background:#F2ECF4;"> <h4 class="text-primary">{{ _("Get in Touch") }}</h4> <i class="fas fa-comments h1 text-primary mx-auto"></i> - <div class=" pt-2" style="text-align: center;"> + <div class=" pt-2"> <p class="toc-entry toc-h2 nav-item mb-0" >{{ ("Chat with us live!") }}</p> - <a href="https://webchat.oftc.net/?channels=tor" class="pt-1">{{ ("Join us on IRC") }}</a> + <a href="https://webchat.oftc.net/?channels=tor" target="_blank" class="pt-1">{{ ("Join us on IRC") }}</a> </div> </div> @@ -55,7 +55,7 @@ </div> </div> </div> - + {% if this.section == "Download" %} {% include 'footer-min.html' %} {% else %}

1 0

[tpo/staging] Update content.lr
by gus＠torproject.org 20 Jul '20

20 Jul '20

commit b22b5006656e6caf685727ce87b9b83539123774 Author: Antonela <hola(a)antonela.me> Date: Tue Jun 2 11:55:25 2020 -0300 Update content.lr --- content/releases/tor-browser-95/contents.lr | 13 +++++++++++-- 1 file changed, 11 insertions(+), 2 deletions(-) diff --git a/content/releases/tor-browser-95/contents.lr b/content/releases/tor-browser-95/contents.lr index 74f51ee0..dc1e1361 100644 --- a/content/releases/tor-browser-95/contents.lr +++ b/content/releases/tor-browser-95/contents.lr @@ -53,11 +53,20 @@ In this release, we have improved the way Tor Browser communicates with users ab **Onion Names** -Because of cryptographic protections, onion service URLs are not easy for humans to remember (ie, torproject.org vs. expyuzz4wqqyqhjn.onion). This makes it hard for users to discover or return to an onion site. We found that organically, developers have approached this problem in different ways, mostly with solutions tailored for their service. Given that there is no solution that works perfectly for all our user groups, we also approached this problem from a broad angle. For this release, we partnered with the [Freedom of the Press Foundation](https://freedom.press/) and [HTTPS Everywhere](https://www.eff.org/https-everywhere) to develop the first proof-of-concept for human-memorable names for onion services addresses. +Because of cryptographic protections, onion service URLs are not easy for humans to remember (ie, https://torproject.org vs. http://expyuzz4wqqyqhjn.onion/). This makes it hard for users to discover or return to an onion site. We found that organically, developers have approached this problem in different ways, mostly with solutions tailored for their service. Given that there is no solution that works perfectly for all our user groups, we also approached this problem from a broad angle. For this release, we partnered with Freedom of the Press Foundation (FPF) and the Electronic Frontier Foundation's HTTPS Everywhere to develop the first proof-of-concept human-memorable names for SecureDrop onion services addresses: + + The Intercept: + theintercept.securedrop.tor.onion + http://xpxduj55x2j27l2qytu2tcetykyfxbjbafin3x4i3ywddzphkbrd3jyd.onion + Lucy Parsons Labs: + lucyparsonslabs.securedrop.tor.onion + http://qn4qfeeslglmwxgb.onion + +Freedom of the Press Foundation has reached out to a small number of additional media organizations for participation, and Tor and FPF will jointly consider next steps based on feedback on this initial proof-of-concept. <img class="w-100" src="/static/images/tb95/onion-names(a)2x.png" alt="Tor Browser 9.5 Onion Names"/> - + **Give Feedback** If you find a bug or have a suggestion for how we could improve this release, please let us know. Thanks to all of the teams across Tor, and the many volunteers, who contributed to this release.

1 0

[tpo/staging] Update template
by gus＠torproject.org 20 Jul '20

20 Jul '20

commit 841a1934e58e0653afd62dd609dbc173b4998572 Author: Antonela <hola(a)antonela.me> Date: Tue Jun 2 08:37:57 2020 -0300 Update template Add sidebar callouts --- templates/release.html | 27 +++++++++++++++++++++++++++ 1 file changed, 27 insertions(+) diff --git a/templates/release.html b/templates/release.html index c1ad2f2e..1671cb60 100644 --- a/templates/release.html +++ b/templates/release.html @@ -8,12 +8,36 @@ <div class="container py-3 mt-5"> + <div class="row"> + <div class="col-sm-9"> {% block body %} {{ this.body }} {% endblock %} </div> + <div class="col-sm-3"> + + <div class="card-body h-100% w-50% text-center border"> + <h4 class="text-primary">{{ _("Do you need help?") }}</h4> + <i class="fas fa-life-ring h1 text-primary mx-auto"></i> + <div class=" pt-2" style="text-align: center;"> + <p class="toc-entry toc-h2 nav-item mb-0" >{{ ("See our community FAQ's") }}</p> + <a href="https://support.torproject.org" class="pt-1">{{ ("Visit Support") }}</a> + </div> + </div> + + <div class="card-body h-100% w-50% text-center mt-4" style="background:#F2ECF4;"> + <h4 class="text-primary">{{ _("Get in Touch") }}</h4> + <i class="fas fa-comments h1 text-primary mx-auto"></i> + <div class=" pt-2" style="text-align: center;"> + <p class="toc-entry toc-h2 nav-item mb-0" >{{ ("Chat with us live!") }}</p> + <a href="https://webchat.oftc.net/?channels=tor" class="pt-1">{{ ("Join us on IRC") }}</a> + </div> + </div> + + </div> + <div class="card mt-5"> <ul class="list-group list-group-flush">  @@ -25,10 +49,13 @@ </div> + </div> + </main> </div> </div> </div> + {% if this.section == "Download" %} {% include 'footer-min.html' %} {% else %}

1 0

[tpo/staging] Merge branch 'master' of git-rw.torproject.org:project/web/tpo
by gus＠torproject.org 20 Jul '20

20 Jul '20

commit a5d3ec3e1328b8919c88fbbac97e9281b08903f9 Merge: b22b5006 bf31abee Author: Antonela <hola(a)antonela.me> Date: Tue Jun 2 16:17:21 2020 -0300 Merge branch 'master' of git-rw.torproject.org:project/web/tpo .../projects/torbrowser/RecommendedTBBVersions/contents.lr | 4 ++++ databags/download-alternatives.ini | 12 ++++++++++++ databags/versions.ini | 4 ++-- 3 files changed, 18 insertions(+), 2 deletions(-)

1 0

[tpo/staging] Add new Tor Browser version 9.5
by gus＠torproject.org 20 Jul '20

20 Jul '20

commit 5efd184c49370354f3a8f78aa14989dedd14f373 Author: Matthew Finkel <sysrqb(a)torproject.org> Date: Mon Jun 1 21:15:04 2020 +0000 Add new Tor Browser version 9.5 --- content/projects/torbrowser/RecommendedTBBVersions/contents.lr | 4 ++++ databags/versions.ini | 4 ++-- 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/content/projects/torbrowser/RecommendedTBBVersions/contents.lr b/content/projects/torbrowser/RecommendedTBBVersions/contents.lr index 10c7c2b9..14be9d11 100644 --- a/content/projects/torbrowser/RecommendedTBBVersions/contents.lr +++ b/content/projects/torbrowser/RecommendedTBBVersions/contents.lr @@ -9,6 +9,10 @@ body: "9.0.10-MacOS", "9.0.10-Linux", "9.0.10-Windows", +"9.5", +"9.5-MacOS", +"9.5-Linux", +"9.5-Windows", "9.5a12", "9.5a12-MacOS", "9.5a12-Linux", diff --git a/databags/versions.ini b/databags/versions.ini index ecb10870..567e1df7 100644 --- a/databags/versions.ini +++ b/databags/versions.ini @@ -1,6 +1,6 @@ [torbrowser-stable] -version = 9.0.10 -win32 = 0.4.2.7 +version = 9.5 +win32 = 0.4.3.5 [torbrowser-alpha] version = 9.5a13

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

tor-commits July 2020