Information
ID: 595
PHID: PHID-TASK-yu2ydov2na5kv7mh7g6z
Author: Patrick
Status at Migration Time: resolved
Priority at Migration Time: Normal
Description
Lots of progress on getting onionshare to work in Whonix has been made.
There is a very good onionshare it will work in #whonix_14. But it will require a little user command line action.
Should we install onionshare by default?
The #usability issue will be, that onionshare will not out of the box. We really shouldn’t enable the control-port-filter-python config for onionshare by default, as it enables the workstation to set up Tor hidden services. (And Tor with hidden services is less secure than Tor as client only.)
onionshare in these cases currently fails in a usability wise very bad way. The gui keeps stuck in “Starting the onionservice…”. (Posted an onionshare feature request to improve the error handling. - But it most likely won’t make it into #debian_stretch.)
Our options are having it only available in Whonix onionshare documentation or installing it by default on still requiring a user to read and apply the Whonix onionshare documentation.
For Whonix releases later than Whonix 14, this could be improved usability wise. Most conveniently in Qubes-Whonix there could be on onionshare launch a qrexec call where then a gateway gui explains this and lets the user enable or not enable the required onionshare config.
Comments
HulaHoop
2017-01-10 15:38:53 UTC
Patrick
2017-01-18 09:31:17 UTC
HulaHoop
2019-01-11 18:46:33 UTC
Patrick
2019-04-06 14:36:37 UTC