Qubes and Whonix now have next-generation Tor onion services!

[Andrew David Wong]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Dear Qubes Community,

The Qubes and Whonix projects now have next-generation Tor onion
services [1] (a.k.a. "v3 onion services"), which provide several
security improvements [2] over v2 onion services:

Qubes:
http://sik5nlgfc5qylnnsr57qrbm64zbdx6t4lreyhpon3ychmxmiem7tioad.onion

Whonix:
http://dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion

These services run alongside our existing ("v2") onion services:

Qubes:
http://qubesos4rrrrz6n4.onion

Whonix:
http://kkkkkkkkkk63ava6.onion

For instructions on accessing the new addresses and further details,
please see the Whonix announcement [3]. Our sincere thanks go to the
Whonix team, and especially fortasse, the Whonix server
administrator, for doing this.


[1] https://blog.torproject.org/tors-fall-harvest-next-generation-onion-services
[2] https://trac.torproject.org/projects/tor/wiki/doc/NextGenOnions
[3] https://www.whonix.org/blog/whonix-new-v3-onion-address

This announcement is also available on the Qubes website:
https://www.qubes-os.org/news/2018/01/23/qubes-whonix-next-gen-tor-onion-services/

- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org

-----BEGIN PGP SIGNATURE-----
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=cwtv
-----END PGP SIGNATURE-----

[Alex Dubois]

On Tuesday, 23 January 2018 07:26:09 UTC, Andrew David Wong wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
> Dear Qubes Community,
>
> The Qubes and Whonix projects now have next-generation Tor onion
> services [1] (a.k.a. "v3 onion services"), which provide several
> security improvements [2] over v2 onion services:
>
> Qubes:
> http://sik5nlgfc5qylnnsr57qrbm64zbdx6t4lreyhpon3ychmxmiem7tioad.onion

Is it https://www.qubes-os.org/ over tor? or is it to get Qubes updates?

[Andrew David Wong]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 2018-01-23 09:17, Alex Dubois wrote:
> On Tuesday, 23 January 2018 07:26:09 UTC, Andrew David Wong wrote:
> Dear Qubes Community,
>
> The Qubes and Whonix projects now have next-generation Tor onion
> services [1] (a.k.a. "v3 onion services"), which provide several
> security improvements [2] over v2 onion services:
>
> Qubes:
> http://sik5nlgfc5qylnnsr57qrbm64zbdx6t4lreyhpon3ychmxmiem7tioad.onion
>
>> Is it https://www.qubes-os.org/ over tor? or is it to get Qubes updates?

At least the website, but possibly for both. Right now, you can get
Qubes updates via yum.qubesos4rrrrz6n4.onion and
deb.qubesos4rrrrz6n4.onion. It should (eventually) also work with the
next-gen onion service, but I'm not sure if it's set up yet. I asked
fortasse:

https://github.com/QubesOS/qubes-issues/issues/2576#issuecomment-360087220

>
> Whonix:
> http://dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion
>
> These services run alongside our existing ("v2") onion services:
>
> Qubes:
> http://qubesos4rrrrz6n4.onion
>
> Whonix:
> http://kkkkkkkkkk63ava6.onion
>
> For instructions on accessing the new addresses and further details,
> please see the Whonix announcement [3]. Our sincere thanks go to the
> Whonix team, and especially fortasse, the Whonix server
> administrator, for doing this.
>
>
> [1] https://blog.torproject.org/tors-fall-harvest-next-generation-onion-services
> [2] https://trac.torproject.org/projects/tor/wiki/doc/NextGenOnions
> [3] https://www.whonix.org/blog/whonix-new-v3-onion-address
>
> This announcement is also available on the Qubes website:
> https://www.qubes-os.org/news/2018/01/23/qubes-whonix-next-gen-tor-onion-services/
>

- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org

-----BEGIN PGP SIGNATURE-----
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=oNch
-----END PGP SIGNATURE-----

[allison...@gmail.com]

[Andrew David Wong]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 2018-01-24 04:28, Andrew David Wong wrote:
> On 2018-01-23 09:17, Alex Dubois wrote:
>> On Tuesday, 23 January 2018 07:26:09 UTC, Andrew David Wong wrote:
>> Dear Qubes Community,
>
>> The Qubes and Whonix projects now have next-generation Tor onion
>> services [1] (a.k.a. "v3 onion services"), which provide several
>> security improvements [2] over v2 onion services:
>
>> Qubes:
>> http://sik5nlgfc5qylnnsr57qrbm64zbdx6t4lreyhpon3ychmxmiem7tioad.onion
>
>>> Is it https://www.qubes-os.org/ over tor? or is it to get Qubes updates?
>
> At least the website, but possibly for both. Right now, you can get
> Qubes updates via yum.qubesos4rrrrz6n4.onion and
> deb.qubesos4rrrrz6n4.onion. It should (eventually) also work with the
> next-gen onion service, but I'm not sure if it's set up yet. I asked
> fortasse:
>
> https://github.com/QubesOS/qubes-issues/issues/2576#issuecomment-360087220
>

fortasse wrote:

"Yes. All of the subdomains for qubesos4rrrrz6n4.onion _should_ work on
sik5nlgfc5qylnnsr57qrbm64zbdx6t4lreyhpon3ychmxmiem7tioad.onion. Let me
know if that's not the case."

https://github.com/QubesOS/qubes-issues/issues/2576#issuecomment-360304683

>
>> Whonix:
>> http://dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion
>
>> These services run alongside our existing ("v2") onion services:
>
>> Qubes:
>> http://qubesos4rrrrz6n4.onion
>
>> Whonix:
>> http://kkkkkkkkkk63ava6.onion
>
>> For instructions on accessing the new addresses and further details,
>> please see the Whonix announcement [3]. Our sincere thanks go to the
>> Whonix team, and especially fortasse, the Whonix server
>> administrator, for doing this.
>
>
>> [1] https://blog.torproject.org/tors-fall-harvest-next-generation-onion-services
>> [2] https://trac.torproject.org/projects/tor/wiki/doc/NextGenOnions
>> [3] https://www.whonix.org/blog/whonix-new-v3-onion-address
>
>> This announcement is also available on the Qubes website:
>> https://www.qubes-os.org/news/2018/01/23/qubes-whonix-next-gen-tor-onion-services/

- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org

-----BEGIN PGP SIGNATURE-----
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=og88
-----END PGP SIGNATURE-----

[alexc...@gmail.com]

I see on the Whonix website that's linked to it simply says:

"To access the v3 onion address, Whonix users must install the latest Tor 3.2.9 client in Whonix-Gateway ( sys-whonix ) via the stable-proposed-updates repository."

Any idea the commands to do this from the terminal for the whonix-gw vm? I've edited the Torrc file before but that's the extent of anything I've ever done with Whonix.

Thanks!

[awokd]

Seems to be out of proposed and in stable now, so all you should have to
do is update your whonix-gw and whonix-ws templates as usual.

[alexc...@gmail.com]

Awesome! I shall do that and go to the link they provide to verify.

Thanks

[Gaijin]

The Qubes OS v3 and v2 onion services sites don't appear to have been
updated since January when this announcement was made. Shouldn't they
show the same content as the normal Qubes site?

For example I don't see the news of the 4.0-rc4 release, or recent
changes to the Docs.

[Andrew David Wong]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 2018-02-11 18:57, Gaijin wrote:

> The Qubes OS v3 and v2 onion services sites don't appear to have been
> updated since January when this announcement was made. Shouldn't they
> show the same content as the normal Qubes site?
>
> For example I don't see the news of the 4.0-rc4 release, or recent
> changes to the Docs.
>

Thanks for the report! Tracking:

https://github.com/QubesOS/qubes-issues/issues/1352#issuecomment-364812018

- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org

-----BEGIN PGP SIGNATURE-----
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=wO/i
-----END PGP SIGNATURE-----

[Gaijin]

On 2018-02-12 01:47, Andrew David Wong wrote:
> On 2018-02-11 18:57, Gaijin wrote:
>
>> The Qubes OS v3 and v2 onion services sites don't appear to have been
>> updated since January when this announcement was made. Shouldn't they
>> show the same content as the normal Qubes site?
>>
>> For example I don't see the news of the 4.0-rc4 release, or recent
>> changes to the Docs.
>>
>
> Thanks for the report! Tracking:
>
> https://github.com/QubesOS/qubes-issues/issues/1352#issuecomment-364812018
>
> - --
> Andrew David Wong (Axon)
> Community Manager, Qubes OS
> https://www.qubes-os.org

FYI: The Onion sites are still not syncing with the Qubes site. They're
still stuck in January 2018...

[Andrew David Wong]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 2018-03-12 02:26, Gaijin wrote:
> On 2018-02-12 01:47, Andrew David Wong wrote:
>> On 2018-02-11 18:57, Gaijin wrote:
>>
>>> The Qubes OS v3 and v2 onion services sites don't appear to have been
>>> updated since January when this announcement was made. Shouldn't they
>>> show the same content as the normal Qubes site?
>>>
>>> For example I don't see the news of the 4.0-rc4 release, or recent
>>> changes to the Docs.
>>>
>>
>> Thanks for the report! Tracking:
>>
>> https://github.com/QubesOS/qubes-issues/issues/1352#issuecomment-364812018
>>
>

> FYI: The Onion sites are still not syncing with the Qubes site. They're
> still stuck in January 2018...
>

Bumped/poked fortasse and CCed Patrick (in case fortasse is known to be
traveling or something):

https://github.com/QubesOS/qubes-issues/issues/1352#issuecomment-372525929

- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org

-----BEGIN PGP SIGNATURE-----
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=VJWO
-----END PGP SIGNATURE-----