From 5a9662387939b7a0fbe55da4409b1af0cb082e18 Mon Sep 17 00:00:00 2001 From: casjay Date: Wed, 22 Oct 2025 16:58:04 -0400 Subject: [PATCH] =?UTF-8?q?=F0=9F=97=83=EF=B8=8F=20Update=20codebase=20?= =?UTF-8?q?=F0=9F=97=83=EF=B8=8F?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit rootfs/root/docker/setup/06-post.sh rootfs/usr/share/httpd/default/list.html --- rootfs/usr/share/httpd/default/list.html | 1746 +++++++++++----------- 1 file changed, 848 insertions(+), 898 deletions(-) diff --git a/rootfs/usr/share/httpd/default/list.html b/rootfs/usr/share/httpd/default/list.html index 0ced704..f41dec2 100644 --- a/rootfs/usr/share/httpd/default/list.html +++ b/rootfs/usr/share/httpd/default/list.html @@ -1,39 +1,35 @@ - + - Welcome to your tor site + - -
-
- -

Real-World Onion Sites

+ +
+

Real-World Onion Sites

This is a list of substantial, commercial-or-social-good mainstream websites which provide onion services.

    -
  • no sites with an "onion-only" presence
  • +
  • no sites with an "onion-only" presence
  • no sites for products/technology with less than (arbitrary) 10,000 users
  • no nudity, exploitation, drugs, copyright infringement or sketchy-content sites
  • the editor reserves all rights to annotate or drop any or all entries as deemed fit
  • licensed: cc-by-sa
  • author/editor: alec muffett
-

Legend/Key for Symbols

+

Legend/Key for Symbols

You can find techical details and the legend/key for symbols in the footnotes section, below.

Regarding Updates and Suggestions

  • This file (README.md) is auto-generated from a spreadsheet
  • Please submit an Issue for consideration / desired change requests
  • Do NOT submit changes NOR pull-requests for it
  • -
  • Re: SecureDrop - all SecureDrop entries are taken automatically from -https://securedrop.org/api/v1/directory/ and must be amended on that site, -not this one.
  • +
  • Re: SecureDrop - all SecureDrop entries are taken automatically from https://securedrop.org/api/v1/directory/ and must be amended on that site, not this one.
-
+

Index

-
+

Blogs

-

Alexander Færøy

+

Alexander Færøy

-

Ctrl blog

+

Ctrl blog

-

Dropsafe | Alec Muffett

+

Dropsafe | Alec Muffett

-

Kushal Das

+

Kushal Das

-

Michael Altfield

+

Michael Altfield

-

Ming Di Leom

+

Ming Di Leom

-

Nick Frichette

+

Nick Frichette

-

Shen's Essays

+

Shen's Essays

-

:arrow_up: return to top index

-
+

⬆️ return to top index

+

Civil Society and Community

-

Privacy International

+

Privacy International

-

Riseup Home

+

Riseup Home

-

Riseup Onion Index

+

Riseup Onion Index

provides shared notepad, file sharing, code hosting, and other services

-

Systemli Home

+

Systemli Home

-

Systemli Onion Index

+

Systemli Onion Index

provides shared notepad, spreadsheet, pastebin, and other services

-

WikiFesad

+

WikiFesad

- -

english law firm; see also https://neilzone.co.uk/2022/03/upgrading-my-onion-site-to-https

+

decoded.legal

+

*english law firm; see also https://neilzone.co.uk/2022/03/upgrading-my-onion-site-to-https *

-

:arrow_up: return to top index

-
+

⬆️ return to top index

+

Education

-

BBC Learning English

+

BBC Learning English

includes resources for many languages

-

BBC Learning English: Mandarin

+

BBC Learning English: Mandarin

-

:arrow_up: return to top index

-
+

⬆️ return to top index

+

Government

-

US Central Intelligence Agency

+

US Central Intelligence Agency

-

:arrow_up: return to top index

-
+

⬆️ return to top index

+

News

-

BBC

+

BBC

-

Bellingcat

+

Bellingcat

-

Bellingcat | es

+

Bellingcat | es

-

Bellingcat | fr

+

Bellingcat | fr

-

Bellingcat | ru

+

Bellingcat | ru

-

Bellingcat | ua

+

Bellingcat | ua

-

Deutsche Welle

+

Deutsche Welle

see language index in titlebar

-

ProPublica

+

ProPublica

-

Radio Free Europe | RFERL

+

Radio Free Europe | RFERL

https://www.rfa.org/about/releases/mirror_websites-04172020105949.html

-

The Guardian

+

The Guardian

-

The Intercept

+

The Intercept

-

The New York Times

+

The New York Times

-

Voice of America | VOA

+

Voice of America | VOA

-

Yahoo News

+

Yahoo News

-

:arrow_up: return to top index

-
+

⬆️ return to top index

+

News BBC World Service

-

BBC News /afaanoromoo | Afaan Oromoo

+

BBC News /afaanoromoo | Afaan Oromoo

-

BBC News /afrique | Afrique

+

BBC News /afrique | Afrique

-

BBC News /amharic | አማርኛ

+

BBC News /amharic | አማርኛ

-

BBC News /arabic | عربي

+

BBC News /arabic | عربي

-

BBC News /azeri | Azərbaycanca

+

BBC News /azeri | Azərbaycanca

-

BBC News /bengali | বাংলা

+

BBC News /bengali | বাংলা

-

BBC News /burmese | မြန်မာ

+

BBC News /burmese | မြန်မာ

-

BBC News /gahuza | Gahuza

+

BBC News /gahuza | Gahuza

-

BBC News /gujarati | ગુજરાતી

+

BBC News /gujarati | ગુજરાતી

-

BBC News /hausa | Hausa

+

BBC News /hausa | Hausa

-

BBC News /hindi | हिंदी

+

BBC News /hindi | हिंदी

-

BBC News /igbo | Ìgbò

+

BBC News /igbo | Ìgbò

-

BBC News /indonesia | Indonesia

+

BBC News /indonesia | Indonesia

-

BBC News /korean | 코리아

+

BBC News /korean | 코리아

-

BBC News /kyrgyz | Кыргыз КызMATы

+

BBC News /kyrgyz | Кыргыз КызMATы

-

BBC News /marathi | मराठी

+

BBC News /marathi | मराठी

-

BBC News /mundo | Mundo

+

BBC News /mundo | Mundo

-

BBC News /nepali | नेपाली

+

BBC News /nepali | नेपाली

-

BBC News /pashto | پښتو

+

BBC News /pashto | پښتو

-

BBC News /persian | فارسی

+

BBC News /persian | فارسی

-

BBC News /pidgin | Pidgin

+

BBC News /pidgin | Pidgin

-

BBC News /portuguese | Brasil

+

BBC News /portuguese | Brasil

-

BBC News /punjabi | ਪੰਜਾਬੀ

+

BBC News /punjabi | ਪੰਜਾਬੀ

-

BBC News /russian | Русская служба

+

BBC News /russian | Русская служба

-

BBC News /serbian/cyr | на српском

+

BBC News /serbian/cyr | на српском

-

BBC News /serbian/lat | na srpskom

+

BBC News /serbian/lat | na srpskom

-

BBC News /sinhala | සිංහල

+

BBC News /sinhala | සිංහල

-

BBC News /somali | Somali

+

BBC News /somali | Somali

-

BBC News /swahili | Swahili

+

BBC News /swahili | Swahili

-

BBC News /tamil | தமிழ்

+

BBC News /tamil | தமிழ்

-

BBC News /telugu | తెలుగు

+

BBC News /telugu | తెలుగు

-

BBC News /thai | ไทย

+

BBC News /thai | ไทย

-

BBC News /tigrinya | ትግርኛ

+

BBC News /tigrinya | ትግርኛ

-

BBC News /turkce | Türkçe

+

BBC News /turkce | Türkçe

-

BBC News /ukrainian | Україна

+

BBC News /ukrainian | Україна

-

BBC News /urdu | اردو

+

BBC News /urdu | اردو

-

BBC News /uzbek | O'zbek

+

BBC News /uzbek | O'zbek

    -
  • transport: :closed_lock_with_key: HTTPS
  • -
  • link: https://www.bbcweb3hytmzhn5d532owbu6oqadra5z3ar726vq5kgwwn6aucdccrad.onion/uzbek
  • +
  • transport: 🔐 HTTPS
  • +
  • link: https://www.bbcweb3hytmzhn5d532owbu6oqadra5z3ar726vq5kgwwn6aucdccrad.onion/uzbek
  • plain: https://www.bbcweb3hytmzhn5d532owbu6oqadra5z3ar726vq5kgwwn6aucdccrad.onion/uzbek
  • -
  • proof: :lock: see tls/ssl certificate
  • -
  • check: :eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk:
  • +
  • proof: 🔒 see tls/ssl certificate
  • +
  • check: ✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️
-

BBC News /vietnamese | Tiếng Việt

+

BBC News /vietnamese | Tiếng Việt

-

BBC News /yoruba | Yorùbá

+

BBC News /yoruba | Yorùbá

-

BBC News /zhongwen/simp | 中文

+

BBC News /zhongwen/simp | 中文

-

BBC News /zhongwen/trad | 中文

+

BBC News /zhongwen/trad | 中文

-

BBC News | In Your Language

+

BBC News | In Your Language

language index

-

:arrow_up: return to top index

-
+

⬆️ return to top index

+

News Deutsche Welle World

-

Deutsche Welle Albanian | Shqip

+

Deutsche Welle Albanian | Shqip

-

Deutsche Welle Amharic | አማርኛ

+

Deutsche Welle Amharic | አማርኛ

-

Deutsche Welle Arabic | العربية

+

Deutsche Welle Arabic | العربية

-

Deutsche Welle Bengali | বাংলা

+

Deutsche Welle Bengali | বাংলা

-

Deutsche Welle Bosnian | B/H/S

+

Deutsche Welle Bosnian | B/H/S

-

Deutsche Welle Bulgarian | Български

+

Deutsche Welle Bulgarian | Български

-

Deutsche Welle Chinese (Simplified) | 简

+

Deutsche Welle Chinese (Simplified) | 简

-

Deutsche Welle Chinese (Traditional) | 繁

+

Deutsche Welle Chinese (Traditional) | 繁

-

Deutsche Welle Croatian | Hrvatski

+

Deutsche Welle Croatian | Hrvatski

-

Deutsche Welle Dari | دری

+

Deutsche Welle Dari | دری

-

Deutsche Welle English | English

+

Deutsche Welle English | English

-

Deutsche Welle French | Français

+

Deutsche Welle French | Français

-

Deutsche Welle German | Deutsch

+

Deutsche Welle German | Deutsch

-

Deutsche Welle Greek | Ελληνικά

+

Deutsche Welle Greek | Ελληνικά

-

Deutsche Welle Hausa | Hausa

+

Deutsche Welle Hausa | Hausa

-

Deutsche Welle Hindi | हिन्दी

+

Deutsche Welle Hindi | हिन्दी

-

Deutsche Welle Indonesian | Indonesia

+

Deutsche Welle Indonesian | Indonesia

-

Deutsche Welle Kiswahili | Kiswahili

+

Deutsche Welle Kiswahili | Kiswahili

-

Deutsche Welle Macedonian | Македонски

+

Deutsche Welle Macedonian | Македонски

-

Deutsche Welle Pashto | پښتو

+

Deutsche Welle Pashto | پښتو

-

Deutsche Welle Persian | فارسی

+

Deutsche Welle Persian | فارسی

-

Deutsche Welle Polish | Polski

+

Deutsche Welle Polish | Polski

-

Deutsche Welle Portuguese | Português do Brasil

+

Deutsche Welle Portuguese | Português do Brasil

-

Deutsche Welle Portuguese | Português para África

+

Deutsche Welle Portuguese | Português para África

cannot find top-page redirect

-

Deutsche Welle Romanian | Română

+

Deutsche Welle Romanian | Română

-

Deutsche Welle Russian | Русский

+

Deutsche Welle Russian | Русский

-

Deutsche Welle Serbian | Српски/Srpski

+

Deutsche Welle Serbian | Српски/Srpski

-

Deutsche Welle Spanish | Español

+

Deutsche Welle Spanish | Español

-

Deutsche Welle Turkish | Türkçe

+

Deutsche Welle Turkish | Türkçe

-

Deutsche Welle Ukrainian | Українська

+

Deutsche Welle Ukrainian | Українська

-

Deutsche Welle Urdu | اردو

+

Deutsche Welle Urdu | اردو

-

:arrow_up: return to top index

-
-

News RFERL & VOA

-

RFERL azatliq | Азатлык хәбәрләре

+

⬆️ return to top index

+
+

News RFERL & VOA

+

RFERL azatliq | Азатлык хәбәрләре

-

RFERL currenttime.tv | Настоящее Время

+

RFERL currenttime.tv | Настоящее Время

-

RFERL europalibera md | Europa Liberă

+

RFERL europalibera md | Europa Liberă

-

RFERL europalibera ro | Europa Liberă

+

RFERL europalibera ro | Europa Liberă

-

RFERL farda | رادیو فردا

+

RFERL farda | رادیو فردا

-

RFERL idelreal | Idel Реалии

+

RFERL idelreal | Idel Реалии

-

RFERL kavkazr | Кавказ Реалии

+

RFERL kavkazr | Кавказ Реалии

-

RFERL krymr ktat | Qırım Aqiqat

+

RFERL krymr ktat | Qırım Aqiqat

-

RFERL krymr ru | Крым Реалии

+

RFERL krymr ru | Крым Реалии

-

RFERL krymr ua | Крим Реалії

+

RFERL krymr ua | Крим Реалії

-

RFERL radiomarsho | Маршо Радион

+

RFERL radiomarsho | Маршо Радион

-

RFERL severreal | Сибирь Реалии

+

RFERL severreal | Сибирь Реалии

-

RFERL sibreal | Сибирь Реалии

+

RFERL sibreal | Сибирь Реалии

-

RFERL svaboda | Радыё Свабода

+

RFERL svaboda | Радыё Свабода

-

VOA russian | Голоса Америки

+

VOA russian | Голоса Америки

-

VOA turkish | Amerika'nın Sesi

+

VOA turkish | Amerika'nın Sesi

-

:arrow_up: return to top index

-
+

⬆️ return to top index

+

Search Engines

-

Brave Search

+

works fine, but seems to block curl / upness-tester; ignore status codes below

-

DuckDuckGo Search

+ -

:arrow_up: return to top index

-
+

⬆️ return to top index

+

Social Networks

-

Facebook

+

Facebook

-

Facebook Mobile

+

Facebook Mobile

-

Reddit

+

Reddit

-

Twitter

+

Twitter

-

:arrow_up: return to top index

-
+

⬆️ return to top index

+

Tech and Software

-

Ablative Hosting

+

Ablative Hosting

-

DEF CON Groups

+

DEF CON Groups

-

DEF CON Home

+

DEF CON Home

-

DEF CON Media

+

DEF CON Media

-

Debian Onion Index

+

Debian Onion Index

-

Hardened BSD Onion Index

+

Hardened BSD Onion Index

-

Impreza Hosting

+

Impreza Hosting

    -
  • transport: :closed_lock_with_key: HTTPS
  • -
  • link: https://imprezareshna326gqgmbdzwmnad2wnjmeowh45bs2buxarh5qummjad.onion/
  • +
  • transport: 🔐 HTTPS
  • +
  • link: https://imprezareshna326gqgmbdzwmnad2wnjmeowh45bs2buxarh5qummjad.onion/
  • plain: https://imprezareshna326gqgmbdzwmnad2wnjmeowh45bs2buxarh5qummjad.onion/
  • proof: link
  • -
  • check: :eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk:
  • +
  • check: ✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️
-

OnionShare

+

OnionShare

-

Qubes OS

+

Qubes OS

-

Tor Project Home

+

Tor Project Home

-

Tor Project Onion Index

+

Tor Project Onion Index

everything tor-related

-

Whonix Forums

+

Whonix Forums

-

Whonix Home

+

Whonix Home

    -
  • transport: :small_red_triangle: HTTP
  • -
  • link: http://dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion/
  • +
  • transport: 🔺 HTTP
  • +
  • link: http://dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion/
  • plain: http://dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion/
  • proof: link
  • -
  • check: :eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk:
  • +
  • check: ✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️
-

keybase.io

+

keybase.io

-

:arrow_up: return to top index

-
+

⬆️ return to top index

+

Web and Internet

-

Archive Today

+

Archive Today

-

Cloudflare Public DNS 1.1.1.1

+

Cloudflare Public DNS 1.1.1.1

    -
  • transport: :closed_lock_with_key: HTTPS
  • -
  • link: https://dns4torpnlfs2ifuz2s2yf3fc7rdmsbhm6rw75euj35pac6ap25zgqad.onion/
  • +
  • transport: 🔐 HTTPS
  • +
  • link: https://dns4torpnlfs2ifuz2s2yf3fc7rdmsbhm6rw75euj35pac6ap25zgqad.onion/
  • plain: https://dns4torpnlfs2ifuz2s2yf3fc7rdmsbhm6rw75euj35pac6ap25zgqad.onion/
  • -
  • proof: :lock: see tls/ssl certificate
  • -
  • check: :eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk:
  • +
  • proof: 🔒 see tls/ssl certificate
  • +
  • check: ✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️
-

HARICA Certificate Authority

+

HARICA Certificate Authority

-

Protonmail

+

Protonmail

-

:arrow_up: return to top index

-
+

⬆️ return to top index

+

SecureDrop

-

2600: The Hacker Quarterly

+

2600: The Hacker Quarterly

via: https://securedrop.org/api/v1/directory/

-

Aftenposten AS

+

Aftenposten AS

via: https://securedrop.org/api/v1/directory/

-

Aftonbladet

+

Aftonbladet

via: https://securedrop.org/api/v1/directory/

-

Bloomberg Industry Group

+

Bloomberg Industry Group

via: https://securedrop.org/api/v1/directory/

-

Bloomberg News

+

Bloomberg News

via: https://securedrop.org/api/v1/directory/

-

CBC

+

CBC

via: https://securedrop.org/api/v1/directory/

-

CNN

-

via: https://securedrop.org/api/v1/directory/

-
    -
  • short: cnn.securedrop.tor.onion
  • -
  • transport: :small_red_triangle: HTTP
  • -
  • link: http://qmifwf762qftydprw2adbg7hs2mkunac5xrz3cb5busaflji3rja5lid.onion
  • -
  • plain: http://qmifwf762qftydprw2adbg7hs2mkunac5xrz3cb5busaflji3rja5lid.onion
  • -
  • proof: link
  • -
  • check: :white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark:
  • -
-

Dagbladet

+

Dagbladet

via: https://securedrop.org/api/v1/directory/

-

Der Spiegel

+

Der Spiegel

via: https://securedrop.org/api/v1/directory/

-

Financial Times

+

Financial Times

via: https://securedrop.org/api/v1/directory/

-

Forbes

+

Forbes

via: https://securedrop.org/api/v1/directory/

-

Forbidden Stories

+

Forbidden Stories

via: https://securedrop.org/api/v1/directory/

-

Greekleaks

+

Greekleaks

via: https://securedrop.org/api/v1/directory/

-

Kenneth R. Rosen

+

Kenneth R. Rosen

via: https://securedrop.org/api/v1/directory/

-

NOYB

-

via: https://securedrop.org/api/v1/directory/

-
    -
  • short: noyb.securedrop.tor.onion
  • -
  • transport: :small_red_triangle: HTTP
  • -
  • link: http://xjc4s5z26i2z5tzjzj3w6jwzuomedzsahq4tccktwdcs6fldt4ojznqd.onion
  • -
  • plain: http://xjc4s5z26i2z5tzjzj3w6jwzuomedzsahq4tccktwdcs6fldt4ojznqd.onion
  • -
  • proof: link
  • -
  • check: :white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark:
  • -
-

NRK

+

NRK

via: https://securedrop.org/api/v1/directory/

-

New York Times

+

New York Times

via: https://securedrop.org/api/v1/directory/

  • short: nytimes.securedrop.tor.onion
  • -
  • transport: :small_red_triangle: HTTP
  • -
  • link: http://ej3kv4ebuugcmuwxctx5ic7zxh73rnxt42soi3tdneu2c2em55thufqd.onion
  • +
  • transport: 🔺 HTTP
  • +
  • link: http://ej3kv4ebuugcmuwxctx5ic7zxh73rnxt42soi3tdneu2c2em55thufqd.onion
  • plain: http://ej3kv4ebuugcmuwxctx5ic7zxh73rnxt42soi3tdneu2c2em55thufqd.onion
  • proof: link
  • -
  • check: :eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk:
  • +
  • check: ✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️
-

News24

+

News24

via: https://securedrop.org/api/v1/directory/

-

POLITICO

+

POLITICO

via: https://securedrop.org/api/v1/directory/

-

Public Intelligence

+

ProPublica

via: https://securedrop.org/api/v1/directory/

+

Public Intelligence

+

via: https://securedrop.org/api/v1/directory/

+
    +
  • transport: 🔺 HTTP
  • +
  • link: http://z4gd5t2g6u6kqeqjeddvmvlhhjtjgslg4elh4ztnct7snskcd7phbiyd.onion
  • plain: http://z4gd5t2g6u6kqeqjeddvmvlhhjtjgslg4elh4ztnct7snskcd7phbiyd.onion
  • proof: link
  • -
  • check: :white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark:
  • +
  • check:
-

Stefania Maurizi

+

Stefania Maurizi

via: https://securedrop.org/api/v1/directory/

-

Süddeutsche Zeitung

+

Süddeutsche Zeitung

via: https://securedrop.org/api/v1/directory/

-

Taz

-

via: https://securedrop.org/api/v1/directory/

-
    -
  • short: taz.securedrop.tor.onion
  • -
  • transport: :small_red_triangle: HTTP
  • -
  • link: http://tazleakssvtc2lqrhkpvbzo6qwolcldzkzoexo7wombufd6a573bhlid.onion
  • -
  • plain: http://tazleakssvtc2lqrhkpvbzo6qwolcldzkzoexo7wombufd6a573bhlid.onion
  • -
  • proof: link
  • -
  • check: :white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark:
  • -
-

The Economist

+

The Economist

via: https://securedrop.org/api/v1/directory/

-

The Globe and Mail

+

The Globe and Mail

via: https://securedrop.org/api/v1/directory/

-

The Guardian

+

The Guardian

via: https://securedrop.org/api/v1/directory/

-

The Intercept

-

via: https://securedrop.org/api/v1/directory/

-
    -
  • short: theintercept.securedrop.tor.onion
  • -
  • transport: :small_red_triangle: HTTP
  • -
  • link: http://lhollo6vzrft3w77mgm67fhfv3fjadmf7oinmafa7tbmupc273oi7kid.onion
  • -
  • plain: http://lhollo6vzrft3w77mgm67fhfv3fjadmf7oinmafa7tbmupc273oi7kid.onion
  • -
  • proof: link
  • -
  • check: :white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark::white_check_mark:
  • -
-

The Washington Post

+

The Washington Post

via: https://securedrop.org/api/v1/directory/

  • short: washingtonpost.securedrop.tor.onion
  • -
  • transport: :small_red_triangle: HTTP
  • -
  • link: http://vfnmxpa6fo4jdpyq3yneqhglluweax2uclvxkytfpmpkp5rsl75ir5qd.onion
  • +
  • transport: 🔺 HTTP
  • +
  • link: http://vfnmxpa6fo4jdpyq3yneqhglluweax2uclvxkytfpmpkp5rsl75ir5qd.onion
  • plain: http://vfnmxpa6fo4jdpyq3yneqhglluweax2uclvxkytfpmpkp5rsl75ir5qd.onion
  • proof: link
  • -
  • check: :eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk::eight_spoked_asterisk:
  • +
  • check: ✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️
-

Toronto Star

+

Toronto Star

via: https://securedrop.org/api/v1/directory/

-

Whistleblower Aid

+

Whistleblower Aid

via: https://securedrop.org/api/v1/directory/

-

:arrow_up: return to top index

-
+

⬆️ return to top index

+

Flaky Sites

These sites have apparently stopped responding.

-

The New York Times: Chinese

+

The New York Times: Chinese

-

treacherous.tech

+

treacherous.tech

-

:arrow_up: return to top index

-
+

⬆️ return to top index

+

Footnotes

    -
  • At the moment where an organisation runs 2+ onion addresses for -closely related services that do not reflect distinct languages / -national interests, I am posting a link to an index of their -onions. Examples: Riseup, Systemli, TorProject, ...
  • -
  • The master list of Onion SSL EV Certificates may be viewed at -https://crt.sh/?q=\.onion
  • +
  • At the moment where an organisation runs 2+ onion addresses for closely related services that do not reflect distinct languages / national interests, I am posting a link to an index of their onions. Examples: Riseup, Systemli, TorProject, ...
  • +
  • The master list of Onion SSL EV Certificates may be viewed at https://crt.sh/?q=.onion

RWOS Status Detector

    -
  • :white_check_mark: site up
  • -
  • :eight_spoked_asterisk: site up, and redirected to another page
  • -
  • :no_entry_sign: site up, but could not access the page
  • -
  • :stop_sign: site up, but reported a system error
  • -
  • :sos: site returned no data, or is down, or curl experienced a transient or permanent network error; may also reflect a problem with the RWOS server connection
  • -
  • :question: same as :sos: but curl specifically mentioned inability to fetch an onion descriptor
  • -
  • :exclamation: same as :sos: but curl specifically mentioned inability to connect to the server
  • -
  • :alarm_clock: same as :sos: but curl specifically mentioned connection timeout as an issue
  • -
  • :timer_clock: same as :sos: but curl specifically mentioned ttl expiry as an issue
  • -
  • :key: same as :sos: but curl specifically mentioned SSL certificates as an issue
  • -
  • :new: site is newly added, no data yet
  • +
  • site up
  • +
  • ✳️ site up, and redirected to another page
  • +
  • 🚫 site up, but could not access the page
  • +
  • 🛑 site up, but reported a system error
  • +
  • 🆘 site returned no data, or is down, or curl experienced a transient or permanent network error; may also reflect a problem with the RWOS server connection
  • +
  • same as 🆘 but curl specifically mentioned inability to fetch an onion descriptor
  • +
  • same as 🆘 but curl specifically mentioned inability to connect to the server
  • +
  • same as 🆘 but curl specifically mentioned connection timeout as an issue
  • +
  • ⏲️ same as 🆘 but curl specifically mentioned ttl expiry as an issue
  • +
  • 🔑 same as 🆘 but curl specifically mentioned SSL certificates as an issue
  • +
  • 🆕 site is newly added, no data yet

You can also see the history of updates.

-

Codes & Exit Statuses

-

Mouse-over the icons for details of HTTP codes, curl exit statuses, -and the number of attempts made on each site.

+

Codes & Exit Statuses

+

Mouse-over the icons for details of HTTP codes, curl exit statuses, and the number of attempts made on each site.

+

TLS Security

-

Due to the fundamental protocol differences between HTTP and -HTTPS, it is not wise to consider HTTP-over-Onion to be "as secure -as HTTPS"; web browsers do and must treat HTTPS requests in -ways that are fundamentally different to HTTP, e.g.:

+

Due to the fundamental protocol differences between HTTP and HTTPS, it is not wise to consider HTTP-over-Onion to be "as secure as HTTPS"; web browsers do and must treat HTTPS requests in ways that are fundamentally different to HTTP, e.g.:

  • with respect to cookie handling, or
  • where the trusted connection terminates, or
  • how to deal with loading embedded insecure content, or
  • whether to permit access to camera and microphone devices (WebRTC)
-

...and the necessity of broad adherence to web standards would make it -harmful to attempt to optimise just one browser (e.g. Tor Browser) to -elevate HTTP-over-Onion to the same levels of trust as HTTPS-over-TCP, -let alone HTTPS-over-Onion. Doubtless some browsers will attempt to -implement "better-than-default trust and security via HTTP over -onions", but this behaviour will not be standard, cannot be -relied upon by clients/users, and will therefore be risky.

-

tl;dr - HTTP-over-Onion should not be considered as secure as -HTTPS-over-Onion, and attempting to force it thusly will create a -future compatibility mess for the ecosystem of onion-capable browsers.

+

...and the necessity of broad adherence to web standards would make it harmful to attempt to optimise just one browser (e.g. Tor Browser) to elevate HTTP-over-Onion to the same levels of trust as HTTPS-over-TCP, let alone HTTPS-over-Onion. Doubtless some browsers will attempt to implement "better-than-default trust and security via HTTP over onions", but this behaviour will not be standard, cannot be relied upon by clients/users, and will therefore be risky.

+

tl;dr - HTTP-over-Onion should not be considered as secure as HTTPS-over-Onion, and attempting to force it thusly will create a future compatibility mess for the ecosystem of onion-capable browsers.

Feedback

-

The issues page -is the fastest and most effective way to submit a suggestion; if you -lack a Github account, try messaging @alecmuffett on Twitter.

-
+

The issues page is the fastest and most effective way to submit a suggestion; if you lack a Github account, try messaging @alecmuffett on Twitter.

+

Back to Top

- - -
-
- + + +