Forum login over .onion broken

Website
22

The problem seems to be with dual domain support? If the forum switched to being onion-only, would that fix the issue?

Regardless, Discourse heavily relies on javascript. Could this be a good opportunity to switch to something like phpBB, which to my knowledge works okay without javascript? Or would that be too burdensome?

edit- I guess if it was onion-only, search engines would not index it, so it would be harder to do the self-support-first policy.

1 Like
23

It might.

Burdensome. Replacing one issue with a completely different forum software probably trading for tons of new issues plus loosing old contents, user accounts or migration (if even possible), whatnot.

Right.

1 Like
24

Try now.

1 Like
25

Logging in over the .onion link now works. And logging in via the clearnet URL still works. Thank you!

1 Like
26

Great!

So it’s fixed.

Technical details:

  • No longer using our custom discourse onion hostname plugin.
  • Made use of DISCOURSE_BACKUP_HOSTNAME.
  • Setting force https can stay enabled.
  • Setting content security policy can stay enabled.
  • It seems that upstream fixed that. Whether by accident or by design is unknown. It’s undocumented.
2 Likes