Live data from Hacker News

MoreOnionsPorfavor: Onionize your website and take back the internet

blog.torproject.org

11–20 of 151 posts

Re: MoreOnionsPorfavor: Onionize your website and take back the internet

#11
post #2

I'm pro decentralizing the internet, but these movements really need some marketing chops. ".onion" TLD? (Yes I know it has been around for awhile) Think of how a normal person will view a ".onion" domain name. It's nonsensical to the uninitiated.

Last century "network" and "web" were metaphors that meant nothing to the uninitiated -- I feel that ".onion" has a shot.

Re: MoreOnionsPorfavor: Onionize your website and take back the internet

#12

What’s the advantage of accessing an onion service (as opposed to accessing a normal https website over tor)?

The website cannot identify who they are, what ISP they use, or where they live. Similarly, middleboxes such as their ISP cannot find out what websites they are browsing, which is still easily possible even with TLS via many methods (DNS, SNI, IP correlation, many others)

Re: MoreOnionsPorfavor: Onionize your website and take back the internet

#13
post #12

What’s the advantage of accessing an onion service (as opposed to accessing a normal https website over tor)?

The website cannot identify who they are, what ISP they use, or where they live. Similarly, middleboxes such as their ISP cannot find out what websites they are browsing, which is still easily possible even with TLS via many methods (DNS, SNI, IP correlation, many others)

What I mean is, how is a .onion website over tor better than an https website over tor? I edited my comment to clarify.

Re: MoreOnionsPorfavor: Onionize your website and take back the internet

#14
post #11
post #2

I'm pro decentralizing the internet, but these movements really need some marketing chops. ".onion" TLD? (Yes I know it has been around for awhile) Think of how a normal person will view a ".onion" domain name. It's nonsensical to the uninitiated.

Last century "network" and "web" were metaphors that meant nothing to the uninitiated -- I feel that ".onion" has a shot.

Just realized network is a metaphor.

Re: MoreOnionsPorfavor: Onionize your website and take back the internet

#15
post #8
post #5

Earlier quoted context omitted.

What about http, ://, www and other TLDs like .co.nz or .ac.uk? All of these were pretty meaningless to initiates of the internet. In this new age of ".pizza" and suchlike, ".onion" doesn't seem much different or weird tbh. (To be clear: I don't think these new tlds are especially good either, but it's the world we live in now.)

To me, .onion reminds me too much of The Onion.

Exactly what I thought the title of the article meant.

I thought it was going to be some random "AI" project that could rewrite your prose in The Onion humour ala:

https://www.theonion.com/fuck-everything-were-doing-five-bla...

Re: MoreOnionsPorfavor: Onionize your website and take back the internet

#16
post #2

I'm pro decentralizing the internet, but these movements really need some marketing chops. ".onion" TLD? (Yes I know it has been around for awhile) Think of how a normal person will view a ".onion" domain name. It's nonsensical to the uninitiated.

I'm bothered much more by the length than the semantics.

Re: MoreOnionsPorfavor: Onionize your website and take back the internet

#17
post #12

Earlier quoted context omitted.

The website cannot identify who they are, what ISP they use, or where they live. Similarly, middleboxes such as their ISP cannot find out what websites they are browsing, which is still easily possible even with TLS via many methods (DNS, SNI, IP correlation, many others)

What I mean is, how is a .onion website over tor better than an https website over tor? I edited my comment to clarify.

The traffic never leaves the Tor network. This has a few advantages:

* You don't need a TLS certificate from a public certificate authority, as it is already encrypted end to end

* The exit node cannot attempt to snoop on your traffic (via TLS SNI) or inject content/ads/exploits into your unencrypted traffic

* It reduces load on the exit nodes so they can work on serving traffic to sites that don't have an .onion endpoint

Re: MoreOnionsPorfavor: Onionize your website and take back the internet

#18
post #12

Earlier quoted context omitted.

The website cannot identify who they are, what ISP they use, or where they live. Similarly, middleboxes such as their ISP cannot find out what websites they are browsing, which is still easily possible even with TLS via many methods (DNS, SNI, IP correlation, many others)

What I mean is, how is a .onion website over tor better than an https website over tor? I edited my comment to clarify.

[deleted]

Re: MoreOnionsPorfavor: Onionize your website and take back the internet

#19

What’s the advantage of accessing an onion service (as opposed to accessing a normal https website over tor)?

I am not an expert but as far as I understand it's harder to do correlation attacks when you're able to monitor network traffic when communication stays inside the Tor network. Additionally, you're replacing (or extending) CAs with Tor's public key cryptography for authentication and encryption.

Computerphile did an interesting video series on this!

Re: MoreOnionsPorfavor: Onionize your website and take back the internet

#20
post #3

I operate a few websites that host static content only. Is there any benefit to setting up onion services for these sites? Or are onion services more valuable for providing interactivity/logins?

This is basically what I was wondering: https://news.ycombinator.com/item?id=23776045
Post reply on HN