- tor-onions - lists.torproject.org

[rt.torproject.org #63908] Onion Services & External Resources Hosted On Them
by Wilton Gorske 29 Jan '16

29 Jan '16

-------- Forwarded Message -------- Subject: [rt.torproject.org #63908] Onion Services & External Resources Hosted On Them Date: Fri, 29 Jan 02016 02:19:11 +0000 From: mk via RT <help(a)rt.torproject.org> Reply-To: help(a)rt.torproject.org To: wilton(a)riseup.net I think you might want to try it on our new ML: https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-onions. On 02016-01-27 23:34:47, wilton(a)riseup.net wrote: > Hello Tor, > > I have a question about Onion Services hosting external resources. > > If there's a webserver hosted as an Onion Service, with an external > resource coded (for instance, a Flickr image on the home page), which > 'node' in the rendezvous points system calls that resource? The client? > The hidden service? The rendezvous? > > It's obviously clear how this works with an exit node on the clearnet, > but not so (to me) with Onion Services. I guess it's the hidden service, > but that means someone watching the network connection of the service > could see it calling the resources for a client every time it was > requested. Right? > > Thanks in advance, > Wilton -- m.k.

2 1

web service onionification
by Andreas Krey 28 Jan '16

28 Jan '16

Hi all, I'm looking for a guide how to take an existing service, and convert it into an .onion-too service (what facebook and propublica did). Problem: Webservices tend to respond to a single URL only (like http://clearservice.com/) and won't deal gracefully with requests to http://onionservie.onion/) i.e. they might redirect to the clearservice address. propublica has published their nginx setup to deal with this, but this looks a bit scary. For one, they don't seem to rewrite protocol-relative URLs like href="//sub.clearservice.com/". And then there generally is the question of ensuring that no clearnet URL escapes the rewriting. I guess for that, you'd need to implement a more thorough link checker and not just some ngnix filter rules. Thoughts on that? (It also occurred to me that you don't actually need to be the clearservice org to be able to set up an onion for them, as long as there is no https enforced/needed on the onion side.) Andreas -- "Totally trivial. Famous last words." From: Linus Torvalds <torvalds(a)*.org> Date: Fri, 22 Jan 2010 07:29:21 -0800

5 5

Prioritising Onion Service Features
by Tim Wilson-Brown - teor 28 Jan '16

28 Jan '16

Hi All, As onion (hidden) service operators, what features would you like to see in release 0.2.8? I want to find out what will help onion service operators the most. I think I might be able to finish Rendezvous Single Onion Services, or help finish Rendezvous Handoff, but not both. A Rendezvous Single Onion Service (RSOS) is an onion service that connects directly to the introduction and rendezvous points. For services that don't need to hide their location, it provides better connection latency, and likely better throughput. (And a large RSOS puts less load on the Tor network than a large HS.) See proposal #260 for more information: https://gitweb.torproject.org/torspec.git/tree/proposals/260-rend-single-on… And for the remaining tasks: https://trac.torproject.org/projects/tor/ticket/17178#childtickets Rendezvous Handoff allows Hidden Services and Rendezvous Single Onion Services to perform the introduction in one tor process, and then handoff the rendezvous to a separate tor process. This allows services to scale beyond the number of rendezvous connections (clients) that a single tor process can handle. We suspect that's about 100 at this point. See proposal #255 for more information: https://gitweb.torproject.org/torspec.git/tree/proposals/255-hs-load-balanc… And for the draft implementation: https://trac.torproject.org/projects/tor/ticket/17254 And the issue it's trying to solve: https://trac.torproject.org/projects/tor/ticket/8902 Some personal background: I have about a week to a month of development time left before I have to start some other work. At this point, it's unclear whether I will be working on Tor or not. So I'd like to maximise the impact of my remaining Tor development time. It would be great if you could help me work out how to do that! Thanks Tim Tim Wilson-Brown (teor) teor2345 at gmail dot com PGP 968F094B teor at blah dot im OTR CAD08081 9755866D 89E2A06F E3558B7F B5A9D14F

4 4

Welcome to !
by George Kadianakis 27 Jan '16

27 Jan '16

Hello there, we welcome you to the [tor-onions] mailing list, a place to discuss anything about operating and administrating hidden services. For example, it's a fine venue for questions about setting up hidden services at scale, or embedding them in applications and the mobile, or figuring out why your hidden service authentication does not work. It is strictly a technical mailing list in the sense that discussing the content of hidden services is considered out of scope. You can think of it as [tor-relays] but for hidden services instead of relays. Finally, if you want to ask a question or make a comment about how to use tor, please consider using the [tor-talk] list instead. Alternatively, if you want to discuss tor development, please consider using the [tor-dev] list. Enjoy!

1 0

testing 1... 2... 3...
by Alec Muffett 22 Jan '16

22 Jan '16

is this thing on? -a

4 4

Testing Reply-To
by Tim Wilson-Brown - teor 21 Jan '16

21 Jan '16

Let's try that again Tim Wilson-Brown (teor) teor2345 at gmail dot com PGP 968F094B teor at blah dot im OTR CAD08081 9755866D 89E2A06F E3558B7F B5A9D14F

1 0

List Administrative Options
by Tim Wilson-Brown - teor 20 Jan '16

20 Jan '16

I've modified the following administrative options on tor-onions: Only list admins can view the member list Reply to list Do not send members a copy of their own posts by default (each member can change this setting) Tim Tim Wilson-Brown (teor) teor2345 at gmail dot com PGP 968F094B teor at blah dot im OTR CAD08081 9755866D 89E2A06F E3558B7F B5A9D14F

1 0