Hi, On Tue, Aug 23, 2016 at 10:21:51PM +0300, Joonas Kylmälä wrote: > The Debian Pure Blends website's onion service > (bcwpy5wca456u7tz.onion) redirects to https://www.debian.org/blends/. > Also people.debian.org's onion service (hd37oiauf5uoz7gg.onion) gets > redirected to the non Tor website. I expected them to not leave the > Tor network as I cannot verify then easily that I'm connecting to the > right server. Is this a configuration issue? For the Pure Blends one, this is my fault. Will come up with a patch for DSA. The same fix would probably also work for people.debian.org. > Also, I didn't see anywhere a signed list of these onion services by > admins of these sites so that I could verify that those sites are > really from the Debian project. Is there one? Currently no, the list is autogenerated from puppet configurations. Thanks, Iain.
Attachment:
signature.asc
Description: PGP signature