Re: [mfv] publish your web server content securely

Gabx wrote:
> Stefan Claas wrote:
>> merkle_metadata.json.ots 514 B
>> Stamped SHA256 hash: 
>> efe524acc00d18c2d45a16f4a340a2503d71d4231dbf83baa7183710caddfc0c
>>
>> merkle_metadata.json 32.1 kB
>> SHA256: 3ea3cc82a9eb6fba6d0688fb87ce973637098f58daf3b6f10d259954a13a90c3
>>
>> FAILURE!
>>
>> File does not match original!

Hi Stefan,
mfv is perfect for privacy-focused sites. Many of us host content
exclusively on Tor hidden services. Without native proxy support,
verification requires awkward workarounds that don't reliably work
with Go binaries.The Go client doesn't work with torsocks
or torify because Go's HTTP client bypasses the LD_PRELOAD mechanism.

I've written a patch that adds native Tor SOCKS5 proxy support to mfvc.
The changes are minimal and backward-compatible.

The key addition is an HTTP client with SOCKS5 dialer:

import "golang.org/x/net/proxy"

func initHTTPClient(useTor bool) error {
     if useTor {
         dialer, err := proxy.SOCKS5("tcp", "127.0.0.1:9050", nil, 
proxy.Direct)
         if err != nil {
             return err
         }
         transport := &http.Transport{
             DialContext: func(ctx context.Context, network, addr 
string) (net.Conn, error) {
                 return dialer.Dial(network, addr)
             },
         }
         httpClient = &http.Client{Transport: transport, Timeout: 120 * 
time.Second}
     }
     return nil
}

best regards

Gabx

~/mfv/mfvc $ ./mfvc 
http://n5ry24fweklbn562o7fnyefanygtwxlgi7aevn26huuxqlsftxy5ljqd.onion/
🧅 Detected .onion address, enabling Tor automatically
🧅 Tor proxy enabled (127.0.0.1:9050)
Starting STRICT verification of: 
http://n5ry24fweklbn562o7fnyefanygtwxlgi7aevn26huuxqlsftxy5ljqd.onion/
URL Domain: n5ry24fweklbn562o7fnyefanygtwxlgi7aevn26huuxqlsftxy5ljqd.onion
STRICT MODE: No domain migration allowed
----------------------------------------------------------------------

Fetching metadata from server...
Metadata found. Created: 2025-12-14 12:20:09 UTC (Unix ET: 1765714809)
Original file count: 177 (included)
Metadata domain: 
n5ry24fweklbn562o7fnyefanygtwxlgi7aevn26huuxqlsftxy5ljqd.onion
Excluded files: 4

Collecting current files from server...
Calculating hashes and Merkle root...

Performing STRICT hash verification...
======================================================================
    VERIFICATION SUCCESSFUL
======================================================================
Server URL: 
http://n5ry24fweklbn562o7fnyefanygtwxlgi7aevn26huuxqlsftxy5ljqd.onion/
Verification Date: 2025-12-14 16:13:19 UTC (Unix ET: 1765728799)
URL Domain: 
n5ry24fweklbn562o7fnyefanygtwxlgi7aevn26huuxqlsftxy5ljqd.onion
Metadata Domain: 
n5ry24fweklbn562o7fnyefanygtwxlgi7aevn26huuxqlsftxy5ljqd.onion
Excluded Files:   4

STATUS: All files unchanged and domain binding correct.
NOTE: 4 files excluded from verification

DOMAIN VERIFICATION (STRICT MODE):
----------------------------------------------------------------------
   URL Domain: 
n5ry24fweklbn562o7fnyefanygtwxlgi7aevn26huuxqlsftxy5ljqd.onion
   Metadata Domain: 
n5ry24fweklbn562o7fnyefanygtwxlgi7aevn26huuxqlsftxy5ljqd.onion
      Domain Match:        Perfect

HASH VERIFICATION:
----------------------------------------------------------------------
   Original Root Hash:     472638922b9fa744f61216eb45db5306b691d59f
   Calculated Merkle Root: bf27031d95684065265a76a5ade68dd6d911dca5
   Calculated Final Hash:  472638922b9fa744f61216eb45db5306b691d59f 
(with domain: 
n5ry24fweklbn562o7fnyefanygtwxlgi7aevn26huuxqlsftxy5ljqd.onion)
   Root Hash Match:        true
   Metadata Created:       2025-12-14 12:20:09 UTC (Unix ET: 1765714809)
   Original File Count:    177 (included)
   Current File Count:     177 (included)
   Excluded Paths:         4 (not verified)
   Original Total Size:    531.1 KiB
   Current Total Size:     531.1 KiB

UNCHANGED FILES: 177 files
======================================================================
    FINAL VERDICT: VERIFICATION SUCCESSFUL
    All files are intact and domain binding is correct.
======================================================================
-- 
https://yamn.virebent.art
https://news.tcpreset.net
http://e2mjj44t3eauxra2rmrlpn7vbd6whziypccfehlrlgnnvgr6xwp5lrad.onion/