Opened 2 years ago

Last modified 13 months ago

#22397 new enhancement

Add a (single) onion service for the new tor blog

Reported by: teor Owned by:
Priority: Medium Milestone:
Component: Webpages/Blog Version:
Severity: Normal Keywords:
Cc: ilf@… Actual Points:
Parent ID: #22013 Points:
Reviewer: Sponsor:

Description

When we asked for this for the old blog, it wasn't technically feasible (or it was a legacy system, so we decided not to do it).

I hope that onion service compatibility (mainly URL rewrites) was one of the requirements for the new blog.

Child Tickets

TicketTypeStatusOwnerSummary
#23132taskclosedAdd blog.torproject.org to onion.torproject.org
#24917enhancementclosedtpacreate a Tor hidden service for blog.torproject.org [ .onion ]

Change History (14)

comment:1 Changed 2 years ago by arma

The reason we didn't do it for the old blog was that the old blog server never got into the main tor server rotation, so deploying the onion set-up on it was not easy.

This new blog is run by the pantheon people, so it is also not in the main tor server rotation. I expect that means it continues to be not easy.

That said, hiro has spoken of setting up a proxy, so we don't have to wonder what logs the pantheon folks keep: #22018. That step might make this ticket easier too.

Last edited 2 years ago by arma (previous) (diff)

comment:2 in reply to:  description Changed 2 years ago by arma

Replying to teor:

onion service compatibility (mainly URL rewrites)

This one is an interesting question.

I have no idea how we're doing on it. Probably not perfectly yet.

comment:3 Changed 2 years ago by ilf

Cc: ilf@… added

comment:4 Changed 2 years ago by arma

Priority: MediumLow

Important to do, but not as urgent as some of the "it's broken!" tickets.

comment:5 Changed 2 years ago by qbi

Component: Webpages/BlogInternal Services/Tor Sysadmin Team
Owner: changed from hiro to tpa

comment:6 Changed 2 years ago by arma

qbi: while you're moving the ticket to the tsa team, be sure not to miss the part where the blog platform itself needs to make only relative links. that is, if there are any absolute links in the blog to https://blog.torproject.org/, then it will be hard to achieve what teor asked for.

comment:7 Changed 2 years ago by weasel

Component: Internal Services/Tor Sysadmin TeamInternal Services/Blog

The blog is not hosted on torproject infrastructure. Onion services should run close to the backend service, so this isn't for us.

comment:8 Changed 2 years ago by cypherpunks

Now how difficult is this? All major browser have SNI support.

comment:9 Changed 2 years ago by weasel

Owner: tpa deleted
Status: newassigned

comment:10 Changed 2 years ago by weasel

Status: assignednew

comment:11 Changed 20 months ago by steph

This would be great to figure out as we are encouraging others to set up onion sites. We were just called out on this in the comments of a related blog post https://blog.torproject.org/comment/273682#comment-273682

comment:12 Changed 20 months ago by cypherpunks

Priority: LowMedium

comment:14 Changed 13 months ago by traumschule

Component: Internal Services/BlogWebpages/Blog

(#22384)

Note: See TracTickets for help on using tickets.