summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDavid Kalnischkies <david@kalnischkies.de>2016-08-26 13:10:21 +0200
committerDavid Kalnischkies <david@kalnischkies.de>2016-10-01 18:04:07 +0200
commit4fd28571663f5116f3efdc864ae3439aec21560f (patch)
treecdd81ea06f0218f2785ccdf33c95049f58dec2fa
parenta48fa02122a62d92dffae0c7ece1519a3067a2d9 (diff)
add pointers to repository onion services to README
The README can't be an authoritive listing of onion services, but by giving some examples and providing pointers to sources more people might find the information that there are in fact many repositories available as an onion service providing an encouragement to use them if needed.
-rw-r--r--README.md29
1 files changed, 28 insertions, 1 deletions
diff --git a/README.md b/README.md
index 16cf381..9380be4 100644
--- a/README.md
+++ b/README.md
@@ -16,12 +16,39 @@ appropriately for your system:
Note the use of httpredir.debian.org so that a mirror close to your exit node
will be automatically chosen.
-Alternatively, if you have the Tor hidden service address of a Debian
+Alternatively, if you have the Tor onion service address of a Debian
mirror, you can use that:
deb tor+http://<long string>.onion/debian unstable main
deb-src tor+http://<long string>.onion/debian unstable main
+## APT repositories as onion services
+
+While apt sends no directly identifying information to mirrors the download of
+metadata like the Translation files as well as individual package names can
+potentially reveal information about a user an adversary could observe.
+If this is a concern, some APT repositories are available as onion services
+which means the information doesn't leave the Tor network via an exit node:
+
+Debian Project: [Complete List](https://onion.debian.org) [Announcement](https://bits.debian.org/2016/08/debian-and-tor-services-available-as-onion-services.html)
+
+ * ftp.debian.org: tor+http://vwakviie2ienjx6t.onion/
+ * security.debian.org: tor+http://sgvtcaew4bxjd7ln.onion/
+ * people.debian.org: tor+http://hd37oiauf5uoz7gg.onion/
+ * mozilla.debian.net: tor+http://fkbjngvraoici6k7.onion/
+ * debug.mirrors.debian.org: tor+http://ktqxbqrhg5ai2c7f.onion/
+ * incoming.debian.org: tor+http://oscbw3h7wrfxqi4m.onion/
+ * ftp.ports.debian.org: tor+http://nbybwh4atabu6xq3.onion/
+ * incoming.ports.debian.org: tor+http://vyrxto4jsgoxvilf.onion/
+
+Tor Project: [Complete List](https://onion.torproject.org/) [Announcement](https://blog.torproject.org/blog/debian-and-tor-services-available-onion-services)
+
+ * deb.torproject.org: tor+http://sdscoq7snqtznauu.onion/
+
+Note that this list might not be current: Verify before use! The list is
+provided only to showcase that many commonly used repositories are already
+available as an onion service.
+
## Configuration
Most users should not need to adjust SOCKS settings.