Onion address for Qubes Community Forum?

[qubesosuserforum1]

Perfect shouldn’t be the enemy of good.

You could just run an nginx reverse proxy to onion that proxies the forum, kinda like EOTK does, while the forum is still hosted by Discourse. While not a perfect solution, it’s still an improvement in the meantime that the forum is still hosted by Discourse.

[alzer89]

It can easily be done. I have made a proof of concept onion address for the forum:

It is an onion service that I run that acts as a clearnet proxy (with HTTPS, of course) to https://forum.qubes-os.org.

However:

• It is REALLY slow
• Because onion services do not use SSL, if the forum redirects you to anything that throws an error, check the address bar, and then change the https:// to http://, and try again, and it should load.

Because I don’t have direct access to the box running this forum, I am forced to decrypt web requests made to my hidden service, encapsulate them into HTTPS requests, and then forward them to the forum as if they were my own.

http://qubesospplmo4oyvn5fo5ykp3ga5dbkxar5c6prj5lvkgcwtg4ufrqid.onion/

This onion address is for viewing only

DO NOT LOG IN USING THIS ONION ADDRESS

I can see EVERYTHING

…including usernames and passwords in POST requests

I don’t keep logs, but even so, I just don’t want your information…

I would actually prefer whatever box this forum is running on to do all of this itself, but I don’t have access to it.

Happy to go through with the forum admins on how to get it done. It’s literally 30 seconds of work

[unman]

It can easily be done. I have made a proof of concept onion address for the forum:

I’m failing to understand what advantage this brings over
straightforward https over Tor.
I think what was wanted was full access to the Forum via an onion site.

I never presume to speak for the Qubes team.
When I comment in the Forum I speak for myself.

[alzer89]

Honestly, if you get lucky with your exit node, there isn’t any, really. And the Qubes forum doesn’t exactly need to hide itself like some onion services, either.

[adw]

@alzer89

I would actually prefer whatever box this forum is running on to do all of this itself, but I don’t have access to it.

Happy to go through with the forum admins on how to get it done. It’s literally 30 seconds of work

The forum admins don’t have access to the box this forum is running on either. In fact, no one at the Qubes OS Project does. It’s hosted by a third-party service provider:

The new Discourse server we are going too

we’ll be using: sounds like you’re doing research for your own use-case, definitely shop around.

Qubes Community Privacy?

In general, I wouldn’t expect any privacy from something that is public on the internet (at least not the public parts). The new provider is Communiteq. I’m not sure what you mean by “operators.” Would that be us, the Qubes team, or the folks at Communiteq? It depends on what you mean by “operator.” I don’t know where the server(s) are located. @deeplow, do you know? I guess I’ll update this to say “Communiteq” instead.

https://forum.qubes-os.org/privacy

[alzer89]

Well that settles it, then. Case closed.