@MasTorDon forcing https redirects on onions with invalid certs is bad UX. even if onions technically are trustworthy without any further authentication, it's bad to tell users to click through cert warnings
Follow

@opal i tried removing the requirement for ssl but the verification emails are sent with a https link. I'm not really a coder but i thought it would be cool to have a mas tor don that can't be shut down by any governments and its users are anonymous.

@MasTorDon >can't be shut down by any governments

that isnt true, see the dozens of hidden service seizures for proof. tor simply makes it more difficult, but by itself it isnt a bulletproof solution
@MasTorDon (sorry for the number of replies)

i just went onto the v3 onion; the website links still direct to the v2 onion. i think this is something you should bring up in the mastodon bug tracker, because absolute links inside a website isnt really good practice. pleroma suffers a similar issue with the media proxy, and i believe the devs are trying to find a way to address it (if they havent already)
@MasTorDon imo if you wanna use v3, use v3, because your instance will ALWAYS federate over v2 onion because it's the canonical name of your instance. so consider that too

@opal I don't think it's a bug as I've read images are always served from the main domain

@jonah i did not see the second one good find. Maybe next week I'll fork it but I'll be busy for two weeks after next week so i didn't wanna start it yet but it shouldn't take that long with that out of the way.

Sign in to participate in the conversation
Mastodon 🔐 privacytools.io

Fast, secure and up-to-date instance. PrivacyTools provides knowledge and tools to protect your privacy against global mass surveillance.

Website: privacytools.io
Matrix Chat: chat.privacytools.io
Support us on OpenCollective, many contributions are tax deductible!