9

Is there any chance that Divisions by zero could run an onion service so that its users could get the extra anonymity/privacy benefits that come with it when browsing over Tor? For comparison, Reddit also runs an onion service.

There is a setup guide for doing this with lemmy, which was published just a few days ago, at https://join-lemmy.org/docs/administration/tor_hidden_service.html

you are viewing a single comment's thread
view the rest of the comments
[-] TeamAssimilation@infosec.pub 5 points 1 year ago

Isn't browsing the clear net Lemmy through Tor browser the same thing? What would be the benefit of an onion domain?

Good question. It's not quite the same.

The most compelling reason is that browsing an onion service does not leak any information about the destination to an exit relay because the connection goes directly to the destination service. Connecting via an onion service makes timing correlation attacks much harder to carry out to deanonymize users since there is no exit relay to record when connections to lemmy.dbzer0.com are made. Posts and the timestamps associated with them on a public social network make timing correlation attacks even easier to perform, since there is evidence on which to validate the results.

It also acts as an advertisement about the site's commitment to anonymity and privacy.

this post was submitted on 23 Jun 2023
9 points (100.0% liked)

/0

1552 readers
99 users here now

Meta community. Discuss about this lemmy instance or lemmy in general.

Service Uptime view

founded 1 year ago
MODERATORS