Re: Debian Pure Blends and People DB redirects onion service to debian.org

Hi,

On Tue, Aug 23, 2016 at 10:21:51PM +0300, Joonas Kylmälä wrote:
> The Debian Pure Blends website's onion service
> (bcwpy5wca456u7tz.onion) redirects to https://www.debian.org/blends/.
> Also people.debian.org's onion service (hd37oiauf5uoz7gg.onion) gets
> redirected to the non Tor website.  I expected them to not leave the
> Tor network as I cannot verify then easily that I'm connecting to the
> right server. Is this a configuration issue?

For the Pure Blends one, this is my fault. Will come up with a patch for
DSA.

The same fix would probably also work for people.debian.org.

> Also, I didn't see anywhere a signed list of these onion services by
> admins of these sites so that I could verify that those sites are
> really from the Debian project. Is there one?

Currently no, the list is autogenerated from puppet configurations.

Thanks,
Iain.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAABCAAGBQJXvZ10AAoJENIXnVuKHtARmaEH/3UA6cTrKS4QFPX8UEuzRiNs
IctEYlFR2a6vX7rP2vcVnr+FuZkwOmhiXtoR8l/hE7vQ/278u0j22bXrTSiL84RB
pGbZ7Tk85fY0m5HjypLNNlC1y/siEACrtCBgiLBYMOQqrGvNm+k5wq0pYgTnMt38
YjZAZkS32GIglc9vrmb0vQ7qkWZRHD2LshLnOddSEOoEBiyphQAMXi7wfauLP86J
lqcA17p5LcBqhIaqfs25MQWFa9MHnwAZkbUBRtYbD8uqF+kNKG/HRJFlVWN0o8/O
kgzcRB/sMy/Fk0sENPv0G9WAPAbo/Qcg3T5g+IWzLRM/GMoRl9RfFT0mTSdcils=
=x7qp
-----END PGP SIGNATURE-----