privacyguides/privacytools.io
Archived
1
0
Fork 0
Code Issues 304 Pull Requests 47 Activity

Replace Alt-Svc with Onion-Location header #2007

Closed
dawidpotocki wants to merge 1 commits from onion-location into master
pull from: onion-location
merge into: :master
Conversation 8 Commits 1 Files Changed 1
+1 -1
dawidpotocki commented 2020-08-01 16:06:00 +00:00 (Migrated from github.com)
Copy Link
Copy Source

Onion-Location is a preferred way by Tor Project to indicate an
available onion service. It allows users to make Tor Browser always use
onion version or to keep using clearnet in a seamless way.

https://community.torproject.org/onion-services/advanced/onion-location/

Example sites:

Onion-Location is a preferred way by Tor Project to indicate an available onion service. It allows users to make Tor Browser always use onion version or to keep using clearnet in a seamless way. https://community.torproject.org/onion-services/advanced/onion-location/ --- Example sites: * https://torproject.org * https://dawidpotocki.com
👍 2
Mikaela (Migrated from github.com) reviewed 2020-08-06 08:30:26 +00:00
nginx/010-headers.conf
@@ -6,3 +6,3 @@
add_header Strict-Transport-Security "max-age=31557600; includeSubDomains; preload";
add_header Alt-Svc 'h2="privacy2zbidut4m4jyj3ksdqidzkw3uoip2vhvhbvwxbqux5xy5obyd.onion:443"; ma=86400; persist=1';
add_header Onion-Location http://privacy2zbidut4m4jyj3ksdqidzkw3uoip2vhvhbvwxbqux5xy5obyd.onion$request_uri always;
add_header Expect-CT 'max-age=86400, enforce';
Mikaela (Migrated from github.com) commented 2020-08-06 08:30:26 +00:00

https://community.torproject.org/onion-services/advanced/onion-location/#nginx doesn't seem to have the always part?

https://community.torproject.org/onion-services/advanced/onion-location/#nginx doesn't seem to have the ` always` part?
dawidpotocki (Migrated from github.com) reviewed 2020-08-06 12:20:53 +00:00
nginx/010-headers.conf
@@ -6,3 +6,3 @@
add_header Strict-Transport-Security "max-age=31557600; includeSubDomains; preload";
add_header Alt-Svc 'h2="privacy2zbidut4m4jyj3ksdqidzkw3uoip2vhvhbvwxbqux5xy5obyd.onion:443"; ma=86400; persist=1';
add_header Onion-Location http://privacy2zbidut4m4jyj3ksdqidzkw3uoip2vhvhbvwxbqux5xy5obyd.onion$request_uri always;
add_header Expect-CT 'max-age=86400, enforce';
dawidpotocki (Migrated from github.com) commented 2020-08-06 12:20:53 +00:00

https://community.torproject.org/onion-services/advanced/onion-location/#nginx doesn't seem to have the always part?

Yes you are right, it doesn't have always.
WONTFIX 🙃

> https://community.torproject.org/onion-services/advanced/onion-location/#nginx doesn't seem to have the ` always` part? Yes you are right, it doesn't have `always`. WONTFIX 🙃
jonah commented 2020-08-06 16:22:15 +00:00
Copy Link
Copy Source

Are we sure Onion-Location replaces alt-svc entirely? It seems like they serve different purposes to me, so it probably makes more sense to serve both.

Are we sure Onion-Location replaces alt-svc entirely? It seems like they serve different purposes to me, so it probably makes more sense to serve both.
Mikaela commented 2020-08-06 17:25:13 +00:00 (Migrated from github.com)
Copy Link
Copy Source

Is Alt-Svc documented anywhere to show it's supported at all? Did it have a spec?

Personally I did leave it present in the only place I used it

Is Alt-Svc documented anywhere to show it's supported at all? Did it have a spec? Personally I did leave it present in the only place I used it
jonah commented 2020-08-06 18:41:24 +00:00
Copy Link
Copy Source

Did it have a spec?

It isn't a Tor specification, alt-svc is an established header that has been used for many different purposes in the past. (Silent HTTPS upgrades, SPDY support, and now this). Its specification was RFC 7838.

Support for it with .onion addresses was added to Tor Browser in Sept 2018.

> Did it have a spec? It isn't a _Tor_ specification, `alt-svc` is an established header that has been used for many different purposes in the past. (Silent HTTPS upgrades, SPDY support, and now this). Its specification was [RFC 7838](https://tools.ietf.org/html/rfc7838). Support for it with .onion addresses was added to Tor Browser in Sept 2018.
👍 1
Mikaela commented 2020-08-06 18:45:19 +00:00 (Migrated from github.com)
Copy Link
Copy Source

👍 I was thinking of a Tor specification like the 100-onion-location-header.txt via the original link, which to be honest appears to be a proposal rather than actual accepted spec, but I guess it's wide adoption means it's becoming one soon.

:+1: I was thinking of a Tor specification like the [100-onion-location-header.txt](https://gitweb.torproject.org/tor-browser-spec.git/tree/proposals/100-onion-location-header.txt) via the original link, which to be honest appears to be a proposal rather than actual accepted spec, but I guess it's wide adoption means it's becoming one soon.
dawidpotocki commented 2020-08-07 11:59:55 +00:00 (Migrated from github.com)
Copy Link
Copy Source

Are we sure Onion-Location replaces alt-svc entirely? It seems like they serve different purposes to me, so it probably makes more sense to serve both.

Well, Alt-Svc kind of removes the option to keep using clearnet… no?

> Are we sure Onion-Location replaces alt-svc entirely? It seems like they serve different purposes to me, so it probably makes more sense to serve both. Well, Alt-Svc kind of removes the option to keep using clearnet… no?
This repo is archived. You cannot comment on pull requests.
Reviewers
No Reviewers
jonah
Mikaela
dawidpotocki
Labels
Clear labels
:mag:🤖 Search Engines
I2P
The Invisible Internet Project (I2P)
 OS
Operating Systems
 Self-contained networks
Social media
Tor
Anything covering the Tor network
 WIP
active work in progress, do not merge or PR (yet)!
 XMPP
Extensible Messaging and Presence Protocol
 [m]
Matrix protocol
 approved
approved, waiting for a PR
 dependencies
Pull requests that update a dependency file
 duplicate
feedback wanted
high priority
iOS
low priority
stale
A label for stalebot if it gets added
 streaming
Anything related to media streaming.
 todo
wontfix
Issues or bugs that will not be fixed and/or do not have significant impact on the project.
 ₿ cryptocurrency
ℹ️ help wanted
↔️ file sharing
⚙️ web extensions
Browser Extension related issues
 ✨ enhancement
❌ software removal
🆕 software suggestion
🆘 critical
🇦🇶 translations
Anything covering a translated version of the site
 🌐 Social News Aggregators
🌐 hosting
🌐 website issue
*Technical* issues with the website.
 🏠 housekeeping
Anything primarily related to site cleanup.
 🐛 bug
👁️ browsers
👥 team chat
💢 conflicting
💬 discussion
💻 hardware
📁 file storage
📝 correction
Correction of content on the website
 📧 email
🔎 research required
🔐 password managers
🔒 VPN
Virtual Private Network
 🔒 file encryption
🖊️ digital notebooks
🗄️ DNS
Domain Name System
 🗨️ instant messaging (im)
🚫 Windows
🤖 Android
🦊 Firefox
Firefox & forks, about:config etc.
 🧰 productivity tools
No labels
Milestone
No items
No Milestone
Assignees
Clear assignees
jonah
No Assignees
1 Participants
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: privacyguides/privacytools.io#2007