Replace Alt-Svc with Onion-Location header #2007
jonah
Loading…
x
Reference in New Issue
Block a user
No description provided.
Delete Branch "onion-location"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Onion-Location is a preferred way by Tor Project to indicate an
available onion service. It allows users to make Tor Browser always use
onion version or to keep using clearnet in a seamless way.
https://community.torproject.org/onion-services/advanced/onion-location/
Example sites:
@ -6,3 +6,3 @@add_header Strict-Transport-Security "max-age=31557600; includeSubDomains; preload";add_header Alt-Svc 'h2="privacy2zbidut4m4jyj3ksdqidzkw3uoip2vhvhbvwxbqux5xy5obyd.onion:443"; ma=86400; persist=1';add_header Onion-Location http://privacy2zbidut4m4jyj3ksdqidzkw3uoip2vhvhbvwxbqux5xy5obyd.onion$request_uri always;add_header Expect-CT 'max-age=86400, enforce';https://community.torproject.org/onion-services/advanced/onion-location/#nginx doesn't seem to have the
alwayspart?@ -6,3 +6,3 @@add_header Strict-Transport-Security "max-age=31557600; includeSubDomains; preload";add_header Alt-Svc 'h2="privacy2zbidut4m4jyj3ksdqidzkw3uoip2vhvhbvwxbqux5xy5obyd.onion:443"; ma=86400; persist=1';add_header Onion-Location http://privacy2zbidut4m4jyj3ksdqidzkw3uoip2vhvhbvwxbqux5xy5obyd.onion$request_uri always;add_header Expect-CT 'max-age=86400, enforce';Yes you are right, it doesn't have
always.WONTFIX 🙃
Are we sure Onion-Location replaces alt-svc entirely? It seems like they serve different purposes to me, so it probably makes more sense to serve both.
Is Alt-Svc documented anywhere to show it's supported at all? Did it have a spec?
Personally I did leave it present in the only place I used it
It isn't a Tor specification,
alt-svcis an established header that has been used for many different purposes in the past. (Silent HTTPS upgrades, SPDY support, and now this). Its specification was RFC 7838.Support for it with .onion addresses was added to Tor Browser in Sept 2018.
👍 I was thinking of a Tor specification like the 100-onion-location-header.txt via the original link, which to be honest appears to be a proposal rather than actual accepted spec, but I guess it's wide adoption means it's becoming one soon.
Well, Alt-Svc kind of removes the option to keep using clearnet… no?