summaryrefslogtreecommitdiff
path: root/README.md
diff options
context:
space:
mode:
Diffstat (limited to 'README.md')
-rw-r--r--README.md29
1 files changed, 28 insertions, 1 deletions
diff --git a/README.md b/README.md
index 16cf381..9380be4 100644
--- a/README.md
+++ b/README.md
@@ -16,12 +16,39 @@ appropriately for your system:
Note the use of httpredir.debian.org so that a mirror close to your exit node
will be automatically chosen.
-Alternatively, if you have the Tor hidden service address of a Debian
+Alternatively, if you have the Tor onion service address of a Debian
mirror, you can use that:
deb tor+http://<long string>.onion/debian unstable main
deb-src tor+http://<long string>.onion/debian unstable main
+## APT repositories as onion services
+
+While apt sends no directly identifying information to mirrors the download of
+metadata like the Translation files as well as individual package names can
+potentially reveal information about a user an adversary could observe.
+If this is a concern, some APT repositories are available as onion services
+which means the information doesn't leave the Tor network via an exit node:
+
+Debian Project: [Complete List](https://onion.debian.org) [Announcement](https://bits.debian.org/2016/08/debian-and-tor-services-available-as-onion-services.html)
+
+ * ftp.debian.org: tor+http://vwakviie2ienjx6t.onion/
+ * security.debian.org: tor+http://sgvtcaew4bxjd7ln.onion/
+ * people.debian.org: tor+http://hd37oiauf5uoz7gg.onion/
+ * mozilla.debian.net: tor+http://fkbjngvraoici6k7.onion/
+ * debug.mirrors.debian.org: tor+http://ktqxbqrhg5ai2c7f.onion/
+ * incoming.debian.org: tor+http://oscbw3h7wrfxqi4m.onion/
+ * ftp.ports.debian.org: tor+http://nbybwh4atabu6xq3.onion/
+ * incoming.ports.debian.org: tor+http://vyrxto4jsgoxvilf.onion/
+
+Tor Project: [Complete List](https://onion.torproject.org/) [Announcement](https://blog.torproject.org/blog/debian-and-tor-services-available-onion-services)
+
+ * deb.torproject.org: tor+http://sdscoq7snqtznauu.onion/
+
+Note that this list might not be current: Verify before use! The list is
+provided only to showcase that many commonly used repositories are already
+available as an onion service.
+
## Configuration
Most users should not need to adjust SOCKS settings.