Opened 11 years ago

#1039 closed enhancement (Won't implement) as

Reported by: Athaba Owned by:
Priority: Low Milestone:
Component: Webpages/Website Version:
Severity: Keywords:
Cc: Athaba, Sebastian Actual Points:
Parent ID: Points:
Reviewer: Sponsor:


I suggest to make all the websites (also) available as

So instead of
the should be also a

In this case there is a, but it has other content.
So maybe name it

The reason for this is to make it harder to find out on which pages of the tor website a user was browsing.

A HTTPS request is encrypted, but if you sniff it you can see the complete hostname (host.domain.tld).
You can't see the directory/file which is requested (

It's also be easier for a the great wall or an ISP to block or even redirect the user to a malicious set of
bridges and therefore get aware of bridge user/their IP addresses.

[Automatically added by flyspray2trac: Operating System: All]

Child Tickets

Change History (3)

comment:1 Changed 11 years ago by Sebastian

There are some issues with that approach, one the above-listed "what if$subdomain already exists" as well as an even larger
problem: Many subdomains point at a different machine than

Using tp.o as a proxy for them isn't a solution here.

Also, this would create problems with mirrors if the new URLs became
canonical, because they would be part of the website, and the mirrors
wouldn't have their content.

comment:2 Changed 11 years ago by phobos is already blocked in china and other places. But due to the different IPs, bridges.tpo, and others are not.

comment:3 Changed 11 years ago by phobos

flyspray2trac: bug closed.

Note: See TracTickets for help on using tickets.