Replace Alt-Svc with Onion-Location header #2007

jonah · 2020-08-01T16:06:00Z

dawidpotocki commented

2020-08-01 16:06:00 +00:00

(Migrated from github.com)

Onion-Location is a preferred way by Tor Project to indicate an
available onion service. It allows users to make Tor Browser always use
onion version or to keep using clearnet in a seamless way.

https://community.torproject.org/onion-services/advanced/onion-location/

Example sites:

Onion-Location is a preferred way by Tor Project to indicate an available onion service. It allows users to make Tor Browser always use onion version or to keep using clearnet in a seamless way. https://community.torproject.org/onion-services/advanced/onion-location/ --- Example sites: * https://torproject.org * https://dawidpotocki.com

👍 2

jonah reviewed 2020-08-01 16:06:00 +00:00

Mikaela (Migrated from github.com) reviewed 2020-08-06 08:30:26 +00:00

nginx/010-headers.conf

						
				@ -6,3 +6,3 @@

				add_header Strict-Transport-Security "max-age=31557600; includeSubDomains; preload";

				add_header Alt-Svc 'h2="privacy2zbidut4m4jyj3ksdqidzkw3uoip2vhvhbvwxbqux5xy5obyd.onion:443"; ma=86400; persist=1';

				add_header Onion-Location http://privacy2zbidut4m4jyj3ksdqidzkw3uoip2vhvhbvwxbqux5xy5obyd.onion$request_uri always;

				add_header Expect-CT 'max-age=86400, enforce';

Mikaela (Migrated from github.com) commented

2020-08-06 08:30:26 +00:00

https://community.torproject.org/onion-services/advanced/onion-location/#nginx doesn't seem to have the always part?

https://community.torproject.org/onion-services/advanced/onion-location/#nginx doesn't seem to have the ` always` part?

dawidpotocki (Migrated from github.com) reviewed 2020-08-06 12:20:53 +00:00

nginx/010-headers.conf

						
				@ -6,3 +6,3 @@

				add_header Strict-Transport-Security "max-age=31557600; includeSubDomains; preload";

				add_header Alt-Svc 'h2="privacy2zbidut4m4jyj3ksdqidzkw3uoip2vhvhbvwxbqux5xy5obyd.onion:443"; ma=86400; persist=1';

				add_header Onion-Location http://privacy2zbidut4m4jyj3ksdqidzkw3uoip2vhvhbvwxbqux5xy5obyd.onion$request_uri always;

				add_header Expect-CT 'max-age=86400, enforce';

dawidpotocki (Migrated from github.com) commented

2020-08-06 12:20:53 +00:00

https://community.torproject.org/onion-services/advanced/onion-location/#nginx doesn't seem to have the always part?

Yes you are right, it doesn't have always.
WONTFIX 🙃

> https://community.torproject.org/onion-services/advanced/onion-location/#nginx doesn't seem to have the ` always` part? Yes you are right, it doesn't have `always`. WONTFIX 🙃

jonah commented

2020-08-06 16:22:15 +00:00

Are we sure Onion-Location replaces alt-svc entirely? It seems like they serve different purposes to me, so it probably makes more sense to serve both.

Mikaela commented

2020-08-06 17:25:13 +00:00

(Migrated from github.com)

Is Alt-Svc documented anywhere to show it's supported at all? Did it have a spec?

Personally I did leave it present in the only place I used it

Is Alt-Svc documented anywhere to show it's supported at all? Did it have a spec? Personally I did leave it present in the only place I used it

jonah commented

2020-08-06 18:41:24 +00:00

Did it have a spec?

It isn't a Tor specification, alt-svc is an established header that has been used for many different purposes in the past. (Silent HTTPS upgrades, SPDY support, and now this). Its specification was RFC 7838.

Support for it with .onion addresses was added to Tor Browser in Sept 2018.

> Did it have a spec? It isn't a _Tor_ specification, `alt-svc` is an established header that has been used for many different purposes in the past. (Silent HTTPS upgrades, SPDY support, and now this). Its specification was [RFC 7838](https://tools.ietf.org/html/rfc7838). Support for it with .onion addresses was added to Tor Browser in Sept 2018.

👍 1

Mikaela commented

2020-08-06 18:45:19 +00:00

(Migrated from github.com)

👍 I was thinking of a Tor specification like the 100-onion-location-header.txt via the original link, which to be honest appears to be a proposal rather than actual accepted spec, but I guess it's wide adoption means it's becoming one soon.

:+1: I was thinking of a Tor specification like the [100-onion-location-header.txt](https://gitweb.torproject.org/tor-browser-spec.git/tree/proposals/100-onion-location-header.txt) via the original link, which to be honest appears to be a proposal rather than actual accepted spec, but I guess it's wide adoption means it's becoming one soon.

dawidpotocki commented

2020-08-07 11:59:55 +00:00

(Migrated from github.com)

Are we sure Onion-Location replaces alt-svc entirely? It seems like they serve different purposes to me, so it probably makes more sense to serve both.

Well, Alt-Svc kind of removes the option to keep using clearnet… no?

> Are we sure Onion-Location replaces alt-svc entirely? It seems like they serve different purposes to me, so it probably makes more sense to serve both. Well, Alt-Svc kind of removes the option to keep using clearnet… no?

This repo is archived. You cannot comment on pull requests.

No reviewers