.onion

.onion

Introduced	2004
TLD type	Pseudo-domain-style host suffix
Status	Not in root, but used by Tor clients, servers, and proxies
Registry	Tor
Intended use	To designate a hidden service reachable via Tor
Actual use	Used by Tor users for services in which both provider and user is anonymous and difficult to trace
Registration restrictions	Addresses are "registered" automatically by Tor client when a hidden service is set up
Structure	Names are opaque strings such as jv6g2ucbhrjcnwgi.onion, generated from public keys
Documents	Tor design document
Dispute policies	N/A
Registry website	www.torproject.org

.onion is a pseudo-top-level domain host suffix (similar in concept to such endings as .bitnet and .uucp used in earlier times) designating an anonymous hidden service reachable via the Tor network. Such addresses are not actual DNS names, and the .onion TLD is not in the Internet DNS root, but with the appropriate proxy software installed, Internet programs such as Web browsers can access sites with .onion addresses by sending the request through the network of Tor servers. The purpose of using such a system is to make both the information provider and the person accessing the information more difficult to trace, whether by one another, by an intermediate network host, or by an outsider.

Addresses in the .onion pseudo-TLD are opaque, non-mnemonic, 16-character alpha-semi-numeric hashes which are automatically generated based on a public key when a hidden service is configured. These 16-character hashes can be made up of any letter of the alphabet, and decimal digits beginning with 2 and ending with 7, thus representing an 80-bit number in base32.

The "onion" name refers to onion routing, the technique used by Tor to achieve a degree of anonymity.

WWW to .onion proxies

Proxies into the Tor network allow accessing dynamically routed services from non-Tor browsers.

tor2web

Allows access using a non-Tor browser by changing the domain suffix .onion of any hidden service host to .tor2web.org. The protocol prefix http:// can also be changed into https:// to use an encrypted connection to the tor2web proxy server in order to provide additional privacy.

For example http://eqt5g4fuenphqinx.onion/ would become https://eqt5g4fuenphqinx.tor2web.org/

Using a proxy server of this kind removes the security of using Tor by having it installed on the computer.

onion.to

Another service for accessing .onion sites. Shows a disclaimer the first time it is used. The same security caveats as above apply in this case.

For example http://eqt5g4fuenphqinx.onion/ would become https://eqt5g4fuenphqinx.onion.to/

.exit

.exit is a pseudo-top-level domain used by Tor users to indicate on the fly to the Tor software the preferred exit node that should be used while connecting to a service such as a web server, without having to edit the configuration file for Tor (torrc)

The syntax used with this domain is hostname + .exitnode + .exit, so that a user wanting to connect to http://www.torproject.org/ through node tor26 would have to enter the URL http://www.torproject.org.tor26.exit.

Example uses for this include accessing a site available only to addresses of a certain country or checking if a certain node is working.

Users can also type exitnode.exit alone to access the IP address of exitnode

Examples of .onion sites

(Tor is required to access the sites)

• The hidden wiki, a wiki about .onion sites
• Core.onion, one long-standing introductory hub to the web of onions
• InspecTor / ExcludeNodes generator, tab-keeping on glitchy or spurious exit nodes
• The Tor Library, small library of books in PDF and other common formats
• talk.masked, an anon-post board
• TorStatusNet, a server hosting StatusNet in "Onionland".
• Freedom Hosting, free hidden web hosting with PHP and MySQL.
  • During October 2011, hacktivist collective Anonymous downed the servers of Freedom Hosting as part of OpDarknet, a campaign against child pornography. Anonymous stated in media releases that Freedom Hosting had refused to remove such sites as "Lolita City" and "Hard Candy," which it found to contain 100 GB of child porn. Anonymous released 1500 user names from these sites and invited the FBI and Interpol to follow up.

See also

• .i2p

External links

• Tor: Hidden Service Configuration Instructions
• Tor Rendezvous Specification
• Article explaining Tor Hidden Services