1

Is it possible that a HSDir can see visited onion urls? If I make a onion website and my friend visits it could there be a way that someone can capture the url he used? (the .onion url).

Jens Kubieziel
  • 8,630
  • 5
  • 35
  • 116
LVK
  • 113
  • 4

1 Answers1

2

Yes, currently HSDirs can see the looked up .onion hostname. This does not include the full URL but just the .onion hostname. Proposal 224 (ticket #12424) will fix this issue. See also #8106.

If you want to make the page accessible to your friends only the HiddenServiceAuthorizeClient option might be something that could interest you.

Peter Gerber
  • 1,342
  • 8
  • 18