Update from 3.3.3 to 3.4.0 was done yesterday. All changes by upstream. No changes by me.
The Discourse Solved plugin for the #all-around-qubes category on the Qubes OS Forum has been disabled:
âCommunityâ and âForumsâ links at Whonixâs onion homepage (at the top bar) lead to clearnet URLs.
Other links there are fine (as far as Iâve seen).
Cannot be fixed.
Reason: Privacy on the Kicksecure Website
(Links to Kicksecure wiki but is also applicable equally to Whonix, because: Whonix is based on Kicksecure)
Yeah this is a bad web page design for sure, but in Tor Browser there was an option to enforce websites which have an onion version in their headers to be redirected directly, this option seems to be disappeared from latest TB versions (not sure whyâŚ).
Good related ticket to the subject.
Called onion location header. This is functional (both by Tor Browser and whonix.org service side). Documented here: Prioritize Onion Connections
But itâs still non-ideal.
- users goes to Whonix onion
- some link redirects to clearnet (unfixable, because upstream webapps do not support multi-domain)
- browser visits clearnet version
- onion location header results in re-upgrading to onion connection
Obviously, ideally, it would not flip-flop onion â clearnet â onion.
related:
Same issue exists on Tor Project onion homepage - some links are clearnet and others are onions. Actually it looks like only the âdownload Tor browserâ links lead to an onion site. I donât see the point - if a single request goes to clearnet along the way, the purpose is defeated.
AlternativesâŚ
This option doesnt exist anymore, not sure why it got removed. fix the documentation?
This option doesnt exist anymore, not sure why it got removed. fix the documentation?
Not removed. Works for me.
TB version: 14.5.1 (based on Mozilla Firefox 128.10.0esr)
Can you check your TB version? or where do you find it?
No.
But File:Whonixonionnotification.png - Whonix is still there.
Yeah only the purple bottom, but the âAlways Prioritize Onionsâ also not there.
Got this:
Removal of automatic .onion site prioritization
The Tor Project has recently been notified of a potential fingerprinting vulnerability with automatic Onion-Location redirects. In an abundance of caution, we have removed the âprioritize .onion sites when knownâ option from Tor Browser. We are looking further into this issue and will provide timely updates as more research and additional recommendations become available.
