Giter Club home page Giter Club logo

real-world-onion-sites's Introduction

This is a list of substantial, commercial-or-social-good mainstream websites which provide onion services.

  • no sites with an "onion-only" presence
  • no sites for tech with less than (arbitrary) 10,000 users
  • no nudity, exploitation, drugs, copyright infringement or sketchy-content sites
  • the editor reserves all rights to annotate or drop any or all entries as deemed fit
  • licensed: cc-by-sa
  • author/editor: alec muffett

You can find techical details and the legend/key for symbols in the footnotes section, below.


Index


Blogs

Alexander FΓ¦rΓΈy πŸ” HTTPS

Ctrl blog πŸ”Ί HTTP

Dropsafe πŸ” HTTPS

Kushal Das πŸ” HTTPS

Ming Di Leom πŸ” HTTPS

Nick Frichette πŸ” HTTPS


Civil Society And Community

Privacy International πŸ” HTTPS

Riseup Home πŸ”Ί HTTP

Riseup Onion Index πŸ”Ί HTTP

provides shared notepad, file sharing, code hosting, and other services

Systemli Home πŸ”Ί HTTP

Systemli Onion Index πŸ”Ί HTTP

provides shared notepad, spreadsheet, pastebin, and other services


Companies And Services

decoded:Legal πŸ”Ί HTTP

english law firm


Education

BBC Learning English πŸ” HTTPS

includes resources for many languages


Government


News And Media

BBC News πŸ” HTTPS

BBC News Pidgin πŸ” HTTPS

language index

Deutsche Welle πŸ” HTTPS

also, see language index in titlebar

Deutsche Welle Arabic πŸ” HTTPS

Deutsche Welle Chinese πŸ” HTTPS

Deutsche Welle Persian πŸ” HTTPS

Deutsche Welle Russian πŸ” HTTPS

Deutsche Welle Turkish πŸ” HTTPS

ProPublica πŸ” HTTPS

  • link: https://p53lf57qovyuvwsc6xnrppyply3vtqm7l6pcobkmyqsiofyeznfu5uqd.onion/
  • plain: https://p53lf57qovyuvwsc6xnrppyply3vtqm7l6pcobkmyqsiofyeznfu5uqd.onion/
  • proof: see tls/ssl certificate
  • check: ✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️

Radio Free Europe πŸ” HTTPS

https://www.rfa.org/about/releases/mirror_websites-04172020105949.html

The Intercept πŸ” HTTPS

The New York Times πŸ” HTTPS


Tech And Software

Ablative Hosting πŸ” HTTPS

DEF CON Groups πŸ”Ί HTTP

DEF CON Home πŸ”Ί HTTP

DEF CON Media πŸ”Ί HTTP

Debian Onion Index πŸ”Ί HTTP

Impreza Hosting πŸ” HTTPS

OnionShare πŸ”Ί HTTP

Qubes OS πŸ”Ί HTTP

Tor Project Home πŸ”Ί HTTP

everything tor

Whonix Forums πŸ”Ί HTTP

Whonix Home πŸ”Ί HTTP

keybase.io πŸ”Ί HTTP


Web And Internet

Archive Today πŸ”Ί HTTP

DuckDuckGo πŸ” HTTPS

Facebook πŸ” HTTPS

Facebook Mobile πŸ” HTTPS

Protonmail πŸ” HTTPS


Securedrop

via: https://securedrop.org/api/v1/directory/

ABC πŸ”Ί HTTP

via: https://securedrop.org/api/v1/directory/

Aftenposten AS πŸ”Ί HTTP

via: https://securedrop.org/api/v1/directory/

Aftonbladet πŸ”Ί HTTP

via: https://securedrop.org/api/v1/directory/

via: https://securedrop.org/api/v1/directory/

Apache πŸ”Ί HTTP

via: https://securedrop.org/api/v1/directory/

Bloomberg News πŸ”Ί HTTP

via: https://securedrop.org/api/v1/directory/

CBC πŸ”Ί HTTP

via: https://securedrop.org/api/v1/directory/

Dagbladet πŸ”Ί HTTP

via: https://securedrop.org/api/v1/directory/

Financial Times πŸ”Ί HTTP

via: https://securedrop.org/api/v1/directory/

  • short: ft.securedrop.tor.onion
  • link: http://nqu6crmtnzs2hs5abo2uqni53yqsnnwqnerdxuzyz5yxairxlzjzt6yd.onion
  • plain: http://nqu6crmtnzs2hs5abo2uqni53yqsnnwqnerdxuzyz5yxairxlzjzt6yd.onion
  • proof: link
  • check: ✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️

Forbidden Stories πŸ”Ί HTTP

via: https://securedrop.org/api/v1/directory/

HuffPost πŸ”Ί HTTP

via: https://securedrop.org/api/v1/directory/

via: https://securedrop.org/api/v1/directory/

Investigace.cz πŸ”Ί HTTP

via: https://securedrop.org/api/v1/directory/

NRK πŸ”Ί HTTP

via: https://securedrop.org/api/v1/directory/

New York Times πŸ”Ί HTTP

via: https://securedrop.org/api/v1/directory/

  • short: nytimes.securedrop.tor.onion
  • link: http://ej3kv4ebuugcmuwxctx5ic7zxh73rnxt42soi3tdneu2c2em55thufqd.onion
  • plain: http://ej3kv4ebuugcmuwxctx5ic7zxh73rnxt42soi3tdneu2c2em55thufqd.onion
  • proof: link
  • check: ✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️

ProPublica πŸ”Ί HTTP

via: https://securedrop.org/api/v1/directory/

Public Intelligence πŸ”Ί HTTP

via: https://securedrop.org/api/v1/directory/

Stefania Maurizi πŸ”Ί HTTP

via: https://securedrop.org/api/v1/directory/

via: https://securedrop.org/api/v1/directory/

TV2 Denmark πŸ”Ί HTTP

via: https://securedrop.org/api/v1/directory/

TechCrunch πŸ”Ί HTTP

via: https://securedrop.org/api/v1/directory/

via: https://securedrop.org/api/v1/directory/

The Globe and Mail πŸ”Ί HTTP

via: https://securedrop.org/api/v1/directory/

The Guardian πŸ”Ί HTTP

via: https://securedrop.org/api/v1/directory/

The Intercept πŸ”Ί HTTP

via: https://securedrop.org/api/v1/directory/

The Washington Post πŸ”Ί HTTP

via: https://securedrop.org/api/v1/directory/

  • short: washingtonpost.securedrop.tor.onion
  • link: http://vfnmxpa6fo4jdpyq3yneqhglluweax2uclvxkytfpmpkp5rsl75ir5qd.onion
  • plain: http://vfnmxpa6fo4jdpyq3yneqhglluweax2uclvxkytfpmpkp5rsl75ir5qd.onion
  • proof: link
  • check: ✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️

Toronto Star πŸ”Ί HTTP

via: https://securedrop.org/api/v1/directory/

VICE Media πŸ”Ί HTTP

via: https://securedrop.org/api/v1/directory/

Whistleblower Aid πŸ”Ί HTTP

via: https://securedrop.org/api/v1/directory/

iROZHLAS πŸ”Ί HTTP

via: https://securedrop.org/api/v1/directory/


Flaky Sites

These sites have apparently stopped responding.

Impffrei.work πŸ” HTTPS

job agency

treacherous.tech πŸ” HTTPS


Footnotes

  • This file (README.md) is auto-generated
    • Do NOT submit changes NOR pull-requests for it
    • Please submit an Issue for consideration / change requests
  • If both v2 and v3 addresses are provided for a service, the v3 address will be preferred / cited
  • At the moment where an organisation runs 2+ onion addresses for closely related services that do not reflect distinct languages / national interests, I am posting a link to an index of their onions. Examples: Riseup, Systemli, TorProject, ...
  • The master list of Onion SSL EV Certificates may be viewed at https://crt.sh/?q=\.onion

RWOS Status Detector

  • βœ… site up
  • ✳️ site up, and redirected to another page
  • 🚫 site up, but could not access the page
  • πŸ›‘ site up, but reported a system error
  • πŸ†˜ site returned no data, or is down, or curl experienced a transient network error (may be a problem with the RWOS server connection)
  • πŸ†• site is newly added, no data yet

You can also see the history of updates.

Codes & Exit Statuses

Mouse-over the icons for details of HTTP codes, curl exit statuses, and the number of attempts made on each site.

TLS Security

Due to the fundamental protocol differences between HTTP and HTTPS, it is not wise to consider HTTP-over-Onion to be "as secure as HTTPS"; web browsers do and must treat HTTPS requests in ways that are fundamentally different to HTTP, e.g.:

  • with respect to cookie handling, or
  • where the trusted connection terminates, or
  • how to deal with loading embedded insecure content, or
  • whether to permit access to camera and microphone devices (WebRTC)

...and the necessity of broad adherence to web standards would make it harmful to attempt to optimise just one browser (e.g. Tor Browser) to elevate HTTP-over-Onion to the same levels of trust as HTTPS-over-TCP, let alone HTTPS-over-Onion. Doubtless some browsers will attempt to implement "better-than-default trust and security via HTTP over onions", but this behaviour will not be standard, cannot be relied upon by clients/users, and will therefore be risky.

tl;dr - HTTP-over-Onion should not be considered as secure as HTTPS-over-Onion, and attempting to force it thusly will create a future compatibility mess for the ecosystem of onion-capable browsers.

Feedback

The issues page is the fastest and most effective way to submit a suggestion; if you lack a Github account, try messaging @alecmuffett on Twitter.


Back to Top

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    πŸ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. πŸ“ŠπŸ“ˆπŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❀️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.