[tor-talk] Does Facebook Onion Work?

[Sebastian Hahn]

> On 17 Feb 2016, at 22:15, David Goulet <dgoulet at ev0ke.net> wrote:
> On 17 Feb (22:10:44), Sebastian Hahn wrote:
>>> On 17 Feb 2016, at 21:17, blobby at openmailbox.org wrote:
>>> Does Facebook still provide an onion link?
>>> 
>>> Because I've tried https://www.facebookcorewwwi.onion/ and I get a neverending loop in which the site loads and loads and loads...
>>> 
>>> Any ideas?
>> 
>> the correct address is https://facebookcorewwwi.onion/ - never use
>> www. in onionland.
> 
> Hrm, actually the subdomains are important for Facebook. They will redirect
> you to the www. if omitted and since the SSL certificate is an EV wild card,
> it can take anything as subdomain. So with that, they can easily regex the URL
> once it arrives to the HS and send it to the right place internally using only
> the subdomain.
> 
> All the languages for instance are subdomain "fr-ca.", "it-it.", "en-us.",
> etc...

ah, I don't ever use facebook so I didn't notice that they actually make use of
that. Could you reproduce the issue, then?

Cheers
Sebastian
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 455 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20160217/fa88087c/attachment.sig>