From bc012f6ee53d9922dcff5acba07634364ad07d6a Mon Sep 17 00:00:00 2001 From: casjay Date: Fri, 21 Nov 2025 13:16:44 -0500 Subject: [PATCH] =?UTF-8?q?=F0=9F=97=83=EF=B8=8F=20Update=20codebase=20?= =?UTF-8?q?=F0=9F=97=83=EF=B8=8F?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit rootfs/usr/share/httpd/default/hidden_services.html rootfs/usr/share/httpd/default/index.html rootfs/usr/share/httpd/default/list.html --- .../share/httpd/default/hidden_services.html | 14 +- rootfs/usr/share/httpd/default/index.html | 2 + rootfs/usr/share/httpd/default/list.html | 7306 +++++++++++++---- 3 files changed, 5713 insertions(+), 1609 deletions(-) diff --git a/rootfs/usr/share/httpd/default/hidden_services.html b/rootfs/usr/share/httpd/default/hidden_services.html index d60e756..2816bd6 100644 --- a/rootfs/usr/share/httpd/default/hidden_services.html +++ b/rootfs/usr/share/httpd/default/hidden_services.html @@ -1,13 +1,11 @@ - + - - + + + Welcome! @@ -15,7 +13,9 @@


Welcome to your hidden onion site!
- This document is located in: REPLACE_ONION_WWW_DIR + This document is located in: REPLACE_ONION_WWW_DIR
+ You can replace it by putting your own index.html file in that directory.
+

diff --git a/rootfs/usr/share/httpd/default/index.html b/rootfs/usr/share/httpd/default/index.html index 76d15f8..fe121db 100644 --- a/rootfs/usr/share/httpd/default/index.html +++ b/rootfs/usr/share/httpd/default/index.html @@ -4,6 +4,8 @@ + + Welcome diff --git a/rootfs/usr/share/httpd/default/list.html b/rootfs/usr/share/httpd/default/list.html index 1b1eaab..442e926 100644 --- a/rootfs/usr/share/httpd/default/list.html +++ b/rootfs/usr/share/httpd/default/list.html @@ -1,1604 +1,5706 @@ - + - - - - - - Welcome to your tor site - - - -
-

Real-World Onion Sites

-

This is a list of substantial, commercial-or-social-good mainstream websites which provide onion services.

- -

Legend/Key for Symbols

-

You can find techical details and the legend/key for symbols in the footnotes section, below.

-

Regarding Updates and Suggestions

- -
-

Index

- -
-

Blogs

-

Alexander Færøy

- -

Ctrl blog

- -

Dropsafe | Alec Muffett

- -

Kushal Das

- -

Michael Altfield

- -

Ming Di Leom

- -

Nick Frichette

- -

Shen's Essays

- -

⬆️ return to top index

-
-

Civil Society and Community

-

Privacy International

- -

Riseup Home

- -

Riseup Onion Index

-

provides shared notepad, file sharing, code hosting, and other services

- -

Systemli Home

- -

Systemli Onion Index

-

provides shared notepad, spreadsheet, pastebin, and other services

- -

WikiFesad

- -

decoded.legal

-

*english law firm; see also https://neilzone.co.uk/2022/03/upgrading-my-onion-site-to-https *

- -

⬆️ return to top index

-
-

Education

-

BBC Learning English

-

includes resources for many languages

- -

BBC Learning English: Mandarin

- -

⬆️ return to top index

-
-

Government

-

US Central Intelligence Agency

- -

⬆️ return to top index

-
-

News

-

BBC

- -

Bellingcat

- -

Bellingcat | es

- -

Bellingcat | fr

- -

Bellingcat | ru

- -

Bellingcat | ua

- -

Deutsche Welle

-

see language index in titlebar

- -

ProPublica

- -

Radio Free Europe | RFERL

-

https://www.rfa.org/about/releases/mirror_websites-04172020105949.html

- -

The Guardian

- -

The Intercept

- -

The New York Times

- -

Voice of America | VOA

- -

Yahoo News

- -

⬆️ return to top index

-
-

News BBC World Service

-

BBC News /afaanoromoo | Afaan Oromoo

- -

BBC News /afrique | Afrique

- -

BBC News /amharic | አማርኛ

- -

BBC News /arabic | عربي

- -

BBC News /azeri | Azərbaycanca

- -

BBC News /bengali | বাংলা

- -

BBC News /burmese | မြန်မာ

- -

BBC News /gahuza | Gahuza

- -

BBC News /gujarati | ગુજરાતી

- -

BBC News /hausa | Hausa

- -

BBC News /hindi | हिंदी

- -

BBC News /igbo | Ìgbò

- -

BBC News /indonesia | Indonesia

- -

BBC News /korean | 코리아

- -

BBC News /kyrgyz | Кыргыз КызMATы

- -

BBC News /marathi | मराठी

- -

BBC News /mundo | Mundo

- -

BBC News /nepali | नेपाली

- -

BBC News /pashto | پښتو

- -

BBC News /persian | فارسی

- -

BBC News /pidgin | Pidgin

- -

BBC News /portuguese | Brasil

- -

BBC News /punjabi | ਪੰਜਾਬੀ

- -

BBC News /russian | Русская служба

- -

BBC News /serbian/cyr | на српском

- -

BBC News /serbian/lat | na srpskom

- -

BBC News /sinhala | සිංහල

- -

BBC News /somali | Somali

- -

BBC News /swahili | Swahili

- -

BBC News /tamil | தமிழ்

- -

BBC News /telugu | తెలుగు

- -

BBC News /thai | ไทย

- -

BBC News /tigrinya | ትግርኛ

- -

BBC News /turkce | Türkçe

- -

BBC News /ukrainian | Україна

- -

BBC News /urdu | اردو

- -

BBC News /uzbek | O'zbek

- -

BBC News /vietnamese | Tiếng Việt

- -

BBC News /yoruba | Yorùbá

- -

BBC News /zhongwen/simp | 中文

- -

BBC News /zhongwen/trad | 中文

- -

BBC News | In Your Language

-

language index

- -

⬆️ return to top index

-
-

News Deutsche Welle World

-

Deutsche Welle Albanian | Shqip

- -

Deutsche Welle Amharic | አማርኛ

- -

Deutsche Welle Arabic | العربية

- -

Deutsche Welle Bengali | বাংলা

- -

Deutsche Welle Bosnian | B/H/S

- -

Deutsche Welle Bulgarian | Български

- -

Deutsche Welle Chinese (Simplified) | 简

- -

Deutsche Welle Chinese (Traditional) | 繁

- -

Deutsche Welle Croatian | Hrvatski

- -

Deutsche Welle Dari | دری

- -

Deutsche Welle English | English

- -

Deutsche Welle French | Français

- -

Deutsche Welle German | Deutsch

- -

Deutsche Welle Greek | Ελληνικά

- -

Deutsche Welle Hausa | Hausa

- -

Deutsche Welle Hindi | हिन्दी

- -

Deutsche Welle Indonesian | Indonesia

- -

Deutsche Welle Kiswahili | Kiswahili

- -

Deutsche Welle Macedonian | Македонски

- -

Deutsche Welle Pashto | پښتو

- -

Deutsche Welle Persian | فارسی

- -

Deutsche Welle Polish | Polski

- -

Deutsche Welle Portuguese | Português do Brasil

- -

Deutsche Welle Portuguese | Português para África

-

cannot find top-page redirect

- -

Deutsche Welle Romanian | Română

- -

Deutsche Welle Russian | Русский

- -

Deutsche Welle Serbian | Српски/Srpski

- -

Deutsche Welle Spanish | Español

- -

Deutsche Welle Turkish | Türkçe

- -

Deutsche Welle Ukrainian | Українська

- -

Deutsche Welle Urdu | اردو

- -

⬆️ return to top index

-
-

News RFERL & VOA

-

RFERL azatliq | Азатлык хәбәрләре

- -

RFERL currenttime.tv | Настоящее Время

- -

RFERL europalibera md | Europa Liberă

- -

RFERL europalibera ro | Europa Liberă

- -

RFERL farda | رادیو فردا

- -

RFERL idelreal | Idel Реалии

- -

RFERL kavkazr | Кавказ Реалии

- -

RFERL krymr ktat | Qırım Aqiqat

- -

RFERL krymr ru | Крым Реалии

- -

RFERL krymr ua | Крим Реалії

- -

RFERL radiomarsho | Маршо Радион

- -

RFERL severreal | Сибирь Реалии

- -

RFERL sibreal | Сибирь Реалии

- -

RFERL svaboda | Радыё Свабода

- -

VOA russian | Голоса Америки

- -

VOA turkish | Amerika'nın Sesi

- -

⬆️ return to top index

-
-

Search Engines

- -

works fine, but seems to block curl / upness-tester; ignore status codes below

- - - -

⬆️ return to top index

-
-

Social Networks

-

Facebook

- -

Facebook Mobile

- -

Reddit

- -

Twitter

- -

⬆️ return to top index

-
-

Tech and Software

-

Ablative Hosting

- -

DEF CON Groups

- -

DEF CON Home

- -

DEF CON Media

- -

Debian Onion Index

- -

Hardened BSD Onion Index

- -

Impreza Hosting

- -

OnionShare

- -

Qubes OS

- -

Tor Project Home

- -

Tor Project Onion Index

-

everything tor-related

- -

Whonix Forums

- -

Whonix Home

- -

keybase.io

- -

⬆️ return to top index

-
-

Web and Internet

-

Archive Today

- -

Cloudflare Public DNS 1.1.1.1

- -

HARICA Certificate Authority

- -

Protonmail

- -

⬆️ return to top index

-
-

SecureDrop

-

2600: The Hacker Quarterly

-

via: https://securedrop.org/api/v1/directory/

- -

Aftenposten AS

-

via: https://securedrop.org/api/v1/directory/

- -

Aftonbladet

-

via: https://securedrop.org/api/v1/directory/

- -

Bloomberg Industry Group

-

via: https://securedrop.org/api/v1/directory/

- -

Bloomberg News

-

via: https://securedrop.org/api/v1/directory/

- -

CBC

-

via: https://securedrop.org/api/v1/directory/

- -

Dagbladet

-

via: https://securedrop.org/api/v1/directory/

- -

Der Spiegel

-

via: https://securedrop.org/api/v1/directory/

- -

Financial Times

-

via: https://securedrop.org/api/v1/directory/

- -

Forbes

-

via: https://securedrop.org/api/v1/directory/

- -

Forbidden Stories

-

via: https://securedrop.org/api/v1/directory/

- -

Greekleaks

-

via: https://securedrop.org/api/v1/directory/

- -

Kenneth R. Rosen

-

via: https://securedrop.org/api/v1/directory/

- -

NRK

-

via: https://securedrop.org/api/v1/directory/

- -

New York Times

-

via: https://securedrop.org/api/v1/directory/

- -

News24

-

via: https://securedrop.org/api/v1/directory/

- -

POLITICO

-

via: https://securedrop.org/api/v1/directory/

- -

ProPublica

-

via: https://securedrop.org/api/v1/directory/

- -

Public Intelligence

-

via: https://securedrop.org/api/v1/directory/

- -

Stefania Maurizi

-

via: https://securedrop.org/api/v1/directory/

- -

Süddeutsche Zeitung

-

via: https://securedrop.org/api/v1/directory/

- -

The Economist

-

via: https://securedrop.org/api/v1/directory/

- -

The Globe and Mail

-

via: https://securedrop.org/api/v1/directory/

- -

The Guardian

-

via: https://securedrop.org/api/v1/directory/

- -

The Washington Post

-

via: https://securedrop.org/api/v1/directory/

- -

Toronto Star

-

via: https://securedrop.org/api/v1/directory/

- -

Whistleblower Aid

-

via: https://securedrop.org/api/v1/directory/

- -

⬆️ return to top index

-
-

Flaky Sites

-

These sites have apparently stopped responding.

-

The New York Times: Chinese

- -

treacherous.tech

- -

⬆️ return to top index

-
-

Footnotes

- -

RWOS Status Detector

- -

You can also see the history of updates.

-

Codes & Exit Statuses

-

Mouse-over the icons for details of HTTP codes, curl exit statuses, and the number of attempts made on each site.

- -

TLS Security

-

Due to the fundamental protocol differences between HTTP and HTTPS, it is not wise to consider HTTP-over-Onion to be "as secure as HTTPS"; web browsers do and must treat HTTPS requests in ways that are fundamentally different to HTTP, e.g.:

- -

...and the necessity of broad adherence to web standards would make it harmful to attempt to optimise just one browser (e.g. Tor Browser) to elevate HTTP-over-Onion to the same levels of trust as HTTPS-over-TCP, let alone HTTPS-over-Onion. Doubtless some browsers will attempt to implement "better-than-default trust and security via HTTP over onions", but this behaviour will not be standard, cannot be relied upon by clients/users, and will therefore be risky.

-

tl;dr - HTTP-over-Onion should not be considered as secure as HTTPS-over-Onion, and attempting to force it thusly will create a future compatibility mess for the ecosystem of onion-capable browsers.

-

Feedback

-

The issues page is the fastest and most effective way to submit a suggestion; if you lack a Github account, try messaging @alecmuffett on Twitter.

-
-

Back to Top

-
-
-
-Last updated on Wednesday, October 22, 2025 at 17:13 EDT -
-
- + + + + + + + + Welcome to your tor site + + +
+

Real-World Onion Sites

+

This is a list of substantial, commercial-or-social-good mainstream websites which provide onion services.

+ +

Legend/Key for Symbols

+

You can find techical details and the legend/key for symbols in the footnotes section, below.

+

Regarding Updates and Suggestions

+ +
+

Index

+ +
+

Blogs

+

Alexander Færøy

+ +

Ctrl blog

+ +

Dropsafe | Alec Muffett

+ +

Kushal Das

+ +

Michael Altfield

+ +

Ming Di Leom

+ +

Nick Frichette

+ +

Shen's Essays

+ +

⬆️ return to top index

+
+

Civil Society and Community

+

Privacy International

+ +

Riseup Home

+ +

+ Riseup Onion Index +

+

provides shared notepad, file sharing, code hosting, and other services

+ +

Systemli Home

+ +

+ Systemli Onion Index +

+

provides shared notepad, spreadsheet, pastebin, and other services

+ +

WikiFesad

+ +

decoded.legal

+

+ *english law firm; see also + https://neilzone.co.uk/2022/03/upgrading-my-onion-site-to-https * +

+ +

⬆️ return to top index

+
+

Education

+

+ BBC Learning English +

+

includes resources for many languages

+ +

+ BBC Learning English: Mandarin +

+ +

⬆️ return to top index

+
+

Government

+

+ US Central Intelligence Agency +

+ +

⬆️ return to top index

+
+

News

+

BBC

+ +

Bellingcat

+ +

Bellingcat | es

+ +

Bellingcat | fr

+ +

Bellingcat | ru

+ +

Bellingcat | ua

+ +

Deutsche Welle

+

see language index in titlebar

+ +

ProPublica

+ +

Radio Free Europe | RFERL

+

+ https://www.rfa.org/about/releases/mirror_websites-04172020105949.html +

+ +

The Guardian

+ +

The Intercept

+ +

The New York Times

+ +

Voice of America | VOA

+ +

Yahoo News

+ +

⬆️ return to top index

+
+

News BBC World Service

+

+ BBC News /afaanoromoo | Afaan Oromoo +

+ +

+ BBC News /afrique | Afrique +

+ +

+ BBC News /amharic | አማርኛ +

+ +

+ BBC News /arabic | عربي +

+ +

+ BBC News /azeri | Azərbaycanca +

+ +

+ BBC News /bengali | বাংলা +

+ +

+ BBC News /burmese | မြန်မာ +

+ +

+ BBC News /gahuza | Gahuza +

+ +

+ BBC News /gujarati | ગુજરાતી +

+ +

BBC News /hausa | Hausa

+ +

BBC News /hindi | हिंदी

+ +

BBC News /igbo | Ìgbò

+ +

+ BBC News /indonesia | Indonesia +

+ +

+ BBC News /korean | 코리아 +

+ +

+ BBC News /kyrgyz | Кыргыз КызMATы +

+ +

+ BBC News /marathi | मराठी +

+ +

BBC News /mundo | Mundo

+ +

+ BBC News /nepali | नेपाली +

+ +

+ BBC News /pashto | پښتو +

+ +

+ BBC News /persian | فارسی +

+ +

+ BBC News /pidgin | Pidgin +

+ +

+ BBC News /portuguese | Brasil +

+ +

+ BBC News /punjabi | ਪੰਜਾਬੀ +

+ +

+ BBC News /russian | Русская служба +

+ +

+ BBC News /serbian/cyr | на српском +

+ +

+ BBC News /serbian/lat | na srpskom +

+ +

+ BBC News /sinhala | සිංහල +

+ +

+ BBC News /somali | Somali +

+ +

+ BBC News /swahili | Swahili +

+ +

BBC News /tamil | தமிழ்

+ +

+ BBC News /telugu | తెలుగు +

+ +

BBC News /thai | ไทย

+ +

+ BBC News /tigrinya | ትግርኛ +

+ +

+ BBC News /turkce | Türkçe +

+ +

+ BBC News /ukrainian | Україна +

+ +

BBC News /urdu | اردو

+ +

+ BBC News /uzbek | O'zbek +

+ +

+ BBC News /vietnamese | Tiếng Việt +

+ +

+ BBC News /yoruba | Yorùbá +

+ +

+ BBC News /zhongwen/simp | 中文 +

+ +

+ BBC News /zhongwen/trad | 中文 +

+ +

+ BBC News | In Your Language +

+

language index

+ +

⬆️ return to top index

+
+

News Deutsche Welle World

+

+ Deutsche Welle Albanian | Shqip +

+ +

+ Deutsche Welle Amharic | አማርኛ +

+ +

+ Deutsche Welle Arabic | العربية +

+ +

+ Deutsche Welle Bengali | বাংলা +

+ +

+ Deutsche Welle Bosnian | B/H/S +

+ +

+ Deutsche Welle Bulgarian | Български +

+ +

+ Deutsche Welle Chinese (Simplified) | 简 +

+ +

+ Deutsche Welle Chinese (Traditional) | 繁 +

+ +

+ Deutsche Welle Croatian | Hrvatski +

+ +

+ Deutsche Welle Dari | دری +

+ +

+ Deutsche Welle English | English +

+ +

+ Deutsche Welle French | Français +

+ +

+ Deutsche Welle German | Deutsch +

+ +

+ Deutsche Welle Greek | Ελληνικά +

+ +

+ Deutsche Welle Hausa | Hausa +

+ +

+ Deutsche Welle Hindi | हिन्दी +

+ +

+ Deutsche Welle Indonesian | Indonesia +

+ +

+ Deutsche Welle Kiswahili | Kiswahili +

+ +

+ Deutsche Welle Macedonian | Македонски +

+ +

+ Deutsche Welle Pashto | پښتو +

+ +

+ Deutsche Welle Persian | فارسی +

+ +

+ Deutsche Welle Polish | Polski +

+ +

+ Deutsche Welle Portuguese | Português do Brasil +

+ +

+ Deutsche Welle Portuguese | Português para África +

+

cannot find top-page redirect

+ +

+ Deutsche Welle Romanian | Română +

+ +

+ Deutsche Welle Russian | Русский +

+ +

+ Deutsche Welle Serbian | Српски/Srpski +

+ +

+ Deutsche Welle Spanish | Español +

+ +

+ Deutsche Welle Turkish | Türkçe +

+ +

+ Deutsche Welle Ukrainian | Українська +

+ +

+ Deutsche Welle Urdu | اردو +

+ +

⬆️ return to top index

+
+

News RFERL & VOA

+

+ RFERL azatliq | Азатлык хәбәрләре +

+ +

+ RFERL currenttime.tv | Настоящее Время +

+ +

+ RFERL europalibera md | Europa Liberă +

+ +

+ RFERL europalibera ro | Europa Liberă +

+ +

RFERL farda | رادیو فردا

+ +

+ RFERL idelreal | Idel Реалии +

+ +

+ RFERL kavkazr | Кавказ Реалии +

+ +

+ RFERL krymr ktat | Qırım Aqiqat +

+ +

+ RFERL krymr ru | Крым Реалии +

+ +

+ RFERL krymr ua | Крим Реалії +

+ +

+ RFERL radiomarsho | Маршо Радион +

+ +

+ RFERL severreal | Сибирь Реалии +

+ +

+ RFERL sibreal | Сибирь Реалии +

+ +

+ RFERL svaboda | Радыё Свабода +

+ +

+ VOA russian | Голоса Америки +

+ +

+ VOA turkish | Amerika'nın Sesi +

+ +

⬆️ return to top index

+
+

Search Engines

+ +

works fine, but seems to block curl / upness-tester; ignore status codes below

+ + + +

⬆️ return to top index

+
+

Social Networks

+

Facebook

+ +

Facebook Mobile

+ +

Reddit

+ +

Twitter

+ +

⬆️ return to top index

+
+

Tech and Software

+

Ablative Hosting

+ +

DEF CON Groups

+ +

DEF CON Home

+ +

DEF CON Media

+ +

Debian Onion Index

+ +

Hardened BSD Onion Index

+ +

Impreza Hosting

+ +

OnionShare

+ +

Qubes OS

+ +

Tor Project Home

+ +

Tor Project Onion Index

+

everything tor-related

+ +

Whonix Forums

+ +

Whonix Home

+ +

keybase.io

+ +

⬆️ return to top index

+
+

Web and Internet

+

Archive Today

+ +

+ Cloudflare Public DNS 1.1.1.1 +

+ +

+ HARICA Certificate Authority +

+ +

Protonmail

+ +

⬆️ return to top index

+
+

SecureDrop

+

2600: The Hacker Quarterly

+

+ via: https://securedrop.org/api/v1/directory/ +

+ +

Aftenposten AS

+

+ via: https://securedrop.org/api/v1/directory/ +

+ +

Aftonbladet

+

+ via: https://securedrop.org/api/v1/directory/ +

+ +

Bloomberg Industry Group

+

+ via: https://securedrop.org/api/v1/directory/ +

+ +

Bloomberg News

+

+ via: https://securedrop.org/api/v1/directory/ +

+ +

CBC

+

+ via: https://securedrop.org/api/v1/directory/ +

+ +

Dagbladet

+

+ via: https://securedrop.org/api/v1/directory/ +

+ +

Der Spiegel

+

+ via: https://securedrop.org/api/v1/directory/ +

+ +

Financial Times

+

+ via: https://securedrop.org/api/v1/directory/ +

+ +

Forbes

+

+ via: https://securedrop.org/api/v1/directory/ +

+ +

Forbidden Stories

+

+ via: https://securedrop.org/api/v1/directory/ +

+ +

Greekleaks

+

+ via: https://securedrop.org/api/v1/directory/ +

+ +

Kenneth R. Rosen

+

+ via: https://securedrop.org/api/v1/directory/ +

+ +

NRK

+

+ via: https://securedrop.org/api/v1/directory/ +

+ +

New York Times

+

+ via: https://securedrop.org/api/v1/directory/ +

+ +

News24

+

+ via: https://securedrop.org/api/v1/directory/ +

+ +

POLITICO

+

+ via: https://securedrop.org/api/v1/directory/ +

+ +

ProPublica

+

+ via: https://securedrop.org/api/v1/directory/ +

+ +

Public Intelligence

+

+ via: https://securedrop.org/api/v1/directory/ +

+ +

Stefania Maurizi

+

+ via: https://securedrop.org/api/v1/directory/ +

+ +

Süddeutsche Zeitung

+

+ via: https://securedrop.org/api/v1/directory/ +

+ +

The Economist

+

+ via: https://securedrop.org/api/v1/directory/ +

+ +

The Globe and Mail

+

+ via: https://securedrop.org/api/v1/directory/ +

+ +

The Guardian

+

+ via: https://securedrop.org/api/v1/directory/ +

+ +

The Washington Post

+

+ via: https://securedrop.org/api/v1/directory/ +

+ +

Toronto Star

+

+ via: https://securedrop.org/api/v1/directory/ +

+ +

Whistleblower Aid

+

+ via: https://securedrop.org/api/v1/directory/ +

+ +

⬆️ return to top index

+
+

Flaky Sites

+

These sites have apparently stopped responding.

+

+ The New York Times: Chinese +

+ +

treacherous.tech

+ +

⬆️ return to top index

+
+

Footnotes

+ +

RWOS Status Detector

+ +

You can also see the history of updates.

+

Codes & Exit Statuses

+

Mouse-over the icons for details of HTTP codes, curl exit statuses, and the number of attempts made on each site.

+ +

TLS Security

+

+ Due to the fundamental protocol differences between HTTP and HTTPS, it is not wise to consider HTTP-over-Onion to be "as + secure as HTTPS"; web browsers do and must treat HTTPS requests in ways that are fundamentally different to HTTP, + e.g.: +

+ +

+ ...and the necessity of broad adherence to web standards would make it harmful to attempt to optimise just one browser (e.g. Tor Browser) to elevate + HTTP-over-Onion to the same levels of trust as HTTPS-over-TCP, let alone HTTPS-over-Onion. Doubtless some browsers will attempt to implement + "better-than-default trust and security via HTTP over onions", but this behaviour will not be standard, cannot be + relied upon by clients/users, and will therefore be risky. +

+

+ tl;dr - HTTP-over-Onion should not be considered as secure as HTTPS-over-Onion, and attempting to force it thusly will create a future + compatibility mess for the ecosystem of onion-capable browsers. +

+

Feedback

+

+ The issues page is the fastest and most effective way to submit a suggestion; + if you lack a Github account, try messaging @alecmuffett on Twitter. +

+
+

Back to Top

+
+
+
Last updated on Wednesday, October 22, 2025 at 17:13 EDT
+
+