Live data from Hacker News

Introducing the Cloudflare Onion Service

blog.cloudflare.com

21–23 of 23 posts

Re: Introducing the Cloudflare Onion Service

#21
post #5

So to recap and ensure I understood correctly... Cloudflare will now offer a Tor Service endpoint. All websites running over CF will automatically route traffic over this Tor endpoint if I use Tor Browser 8. If that is the case, it's quite awesome indeed, I should investigate the alt-svc thingy and add a tor node on my services for that stuff... Very interesting.

> I should investigate the alt-svc thingy and add a tor node on my services for that stuff... Very interesting. If you do, I'd say also make the onion address known and just offer that up to your users too. If you're hosting your own onion and own site, the alt-svc thing only has value to those who can't remember the onion (and don't mind the extra lookup).

Probably not, I'd want to run it to avoid the exit node thing, I don't really want to bother with a proper onion address and having to distribute it. They're fairly opaque, I'd rather hide that they are being used.

Re: Introducing the Cloudflare Onion Service

#22

> The option is available in the Crypto tab of the Cloudflare dashboard. I'm not currently seeing this in my account.

The option showed up for me a few hours after this was posted on HN. But as far as I can tell, in Tor Browser 8.0, it’s still using exit nodes when I access cloudflare.com and the site I activated the option on.

Does anyone know how to see this in action?

Re: Introducing the Cloudflare Onion Service

#23
post #21

Earlier quoted context omitted.

> I should investigate the alt-svc thingy and add a tor node on my services for that stuff... Very interesting. If you do, I'd say also make the onion address known and just offer that up to your users too. If you're hosting your own onion and own site, the alt-svc thing only has value to those who can't remember the onion (and don't mind the extra lookup).

Probably not, I'd want to run it to avoid the exit node thing, I don't really want to bother with a proper onion address and having to distribute it. They're fairly opaque, I'd rather hide that they are being used.

You won't hide it if you're using alt-svc, it'll be plainly visible in HTTP (just maybe not in the browser address bar). All alt-svc is doing is essentially redirecting to the onion, so might as well make it visible.
Post reply on HN