From 4fd28571663f5116f3efdc864ae3439aec21560f Mon Sep 17 00:00:00 2001 From: David Kalnischkies Date: Fri, 26 Aug 2016 13:10:21 +0200 Subject: add pointers to repository onion services to README The README can't be an authoritive listing of onion services, but by giving some examples and providing pointers to sources more people might find the information that there are in fact many repositories available as an onion service providing an encouragement to use them if needed. --- README.md | 29 ++++++++++++++++++++++++++++- 1 file changed, 28 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 16cf381..9380be4 100644 --- a/README.md +++ b/README.md @@ -16,12 +16,39 @@ appropriately for your system: Note the use of httpredir.debian.org so that a mirror close to your exit node will be automatically chosen. -Alternatively, if you have the Tor hidden service address of a Debian +Alternatively, if you have the Tor onion service address of a Debian mirror, you can use that: deb tor+http://.onion/debian unstable main deb-src tor+http://.onion/debian unstable main +## APT repositories as onion services + +While apt sends no directly identifying information to mirrors the download of +metadata like the Translation files as well as individual package names can +potentially reveal information about a user an adversary could observe. +If this is a concern, some APT repositories are available as onion services +which means the information doesn't leave the Tor network via an exit node: + +Debian Project: [Complete List](https://onion.debian.org) [Announcement](https://bits.debian.org/2016/08/debian-and-tor-services-available-as-onion-services.html) + + * ftp.debian.org: tor+http://vwakviie2ienjx6t.onion/ + * security.debian.org: tor+http://sgvtcaew4bxjd7ln.onion/ + * people.debian.org: tor+http://hd37oiauf5uoz7gg.onion/ + * mozilla.debian.net: tor+http://fkbjngvraoici6k7.onion/ + * debug.mirrors.debian.org: tor+http://ktqxbqrhg5ai2c7f.onion/ + * incoming.debian.org: tor+http://oscbw3h7wrfxqi4m.onion/ + * ftp.ports.debian.org: tor+http://nbybwh4atabu6xq3.onion/ + * incoming.ports.debian.org: tor+http://vyrxto4jsgoxvilf.onion/ + +Tor Project: [Complete List](https://onion.torproject.org/) [Announcement](https://blog.torproject.org/blog/debian-and-tor-services-available-onion-services) + + * deb.torproject.org: tor+http://sdscoq7snqtznauu.onion/ + +Note that this list might not be current: Verify before use! The list is +provided only to showcase that many commonly used repositories are already +available as an onion service. + ## Configuration Most users should not need to adjust SOCKS settings. -- cgit v1.2.3-18-g5258