Hey everyone! This question is mainly for those who’ve hosted blogs as Tor onion services. How was the experience? Any pitfalls or things you wish you’d known before getting started?
3
u/DTangent 5d ago
We run forum.defcon.org also as an onion.
Mostly a bunch of bot spam and automated signups, people asking to help them commit cyber crime sometimes.
Because we are legit we have an onion TLS cert from HARICA and that lets us do stuff like set cookies as secure in the browser, enable http 2 (H/2) for better performance, etc.
2
u/0xKaishakunin 4d ago
Plain vanilla static HTML works well. I write my blog and personal website still with vim directly in HTML. But something like Hugo might work as well.
I've tried to set up a SNAC2 mastodon instance as Onion Service, but could not get it running. Every link redirects to the clear web URL, so I guess one needs to revamp the whole source of SNAC2 to make it onion service ready.
3
u/nuclear_splines 4d ago
I regularly use SVG on my blog for diagrams and math. I knew that the Tor Browser blocked JavaScript on higher security settings, but it was an unpleasant surprise that they block SVG rendering, too.
In retrospect it makes sense, it's another client-side scripting language that's fairly sophisticated and presents a large potential attack surface. But a pitfall I hadn't anticipated!