Git-Mirrors/real-world-onion-sites
1
0
Fork 0
mirror of https://github.com/alecmuffett/real-world-onion-sites.git synced 2024-10-01 01:06:18 -04:00
Code Issues Packages Projects Releases Wiki Activity
This is a list of substantial, commercial-or-social-good mainstream websites which provide onion services.
1,780 Commits 1 Branch 0 Tags 37 MiB
Python 84.8%
Shell 13.3%
Makefile 1.9%
05f8268a77
Go to file
Alec Muffett 05f8268a77 auto-update on Wed May 5 12:06:00 UTC 2021
2021-05-05 12:06:00 +00:00
.gitignore commit: ignore single character files 2019-11-21 16:44:08 +00:00
01-preamble.md auto-update on Fri 6 Dec 06:20:28 UTC 2019 2019-12-06 06:20:28 +00:00
02-footnotes.md auto-update on Tue 6 Oct 20:47:45 UTC 2020 2020-10-06 20:47:45 +00:00
ct-log.txt auto-update on Thu Apr 29 00:06:03 UTC 2021 2021-04-29 00:06:03 +00:00
get-ct-log.sh auto-update on Tue 4 Feb 07:25:54 UTC 2020 2020-02-04 07:25:55 +00:00
Makefile auto-update on Tue 4 Feb 07:25:54 UTC 2020 2020-02-04 07:25:55 +00:00
manual-check.sh auto-update on Sat Nov 21 09:27:49 UTC 2020 2020-11-21 09:27:49 +00:00
master.csv auto-update on Mon 19 Oct 16:18:30 UTC 2020 2020-10-19 16:18:30 +00:00
README.md auto-update on Wed May 5 12:06:00 UTC 2021 2021-05-05 12:06:00 +00:00
rwos-db.py auto-update on Sat Nov 21 09:27:49 UTC 2020 2020-11-21 09:27:49 +00:00
wrapper.sh auto-update on Fri Nov 20 21:02:14 UTC 2020 2020-11-20 21:02:14 +00:00

README.md

Real-World Onion Sites

This is a list of substantial, commercial-or-social-good mainstream websites which provide onion services.

  • no sites with an "onion-only" presence
  • no sites for tech with less than (arbitrary) 10,000 users
  • no nudity, exploitation, drugs, copyright infringement or sketchy-content sites
  • the editor reserves all rights to annotate or drop any or all entries as deemed fit
  • licensed: cc-by-sa
  • author/editor: alec muffett

You can find techical details and the legend/key for symbols in the footnotes section, below.

Index

Civil Society And Community

Privacy International 🔐

  • link: https://privacyintyqcroe.onion/
  • plain: https://privacyintyqcroe.onion/
  • proof: see tls/ssl certificate
  • check: 🆘🆘🆘🆘🆘🆘🆘🆘✅✅✅✅✅✅

Riseup Home 🔧

Riseup Onion Index 🔧

provides shared notepad, file sharing, code hosting, and other services

Systemli Home 🔧

Systemli Onion Index 🔧

provides shared notepad, spreadsheet, pastebin, and other services

Companies And Services

decoded:Legal 🔧

english law firm

Education

BBC Learning English 🔧

includes resources for many languages

BBC Learning English: Mandarin 🔧

Government

US Central Intelligence Agency 🔧

News And Media

BBC News 🔐

BBC News Arabic | عربى 🔐

BBC News Chinese | 中文 🔐

BBC News Persian | فارسی 🔐

BBC News Pidgin 🔐

BBC News Russian | Русская 🔐

BBC News Turkish | Türkçe 🔐

BBC News Vietnamese | Tiếng Việt 🔐

BBC News | In Your Language 🔐

language index

BuzzFeed News 🔐

  • link: https://bfnews3u2ox4m4ty.onion/
  • plain: https://bfnews3u2ox4m4ty.onion/
  • proof: see tls/ssl certificate
  • check: ✅✅✅✅✅✅✅✅✅✅✅✅✅✅

Deutsche Welle 🔐

also, see language index in titlebar

Deutsche Welle Arabic 🔐

  • link: https://www.dwnewsvdyyiamwnp.onion/ar/
  • plain: https://www.dwnewsvdyyiamwnp.onion/ar/
  • proof: see tls/ssl certificate
  • check: ✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️

Deutsche Welle Chinese 🔐

  • link: https://www.dwnewsvdyyiamwnp.onion/zh/
  • plain: https://www.dwnewsvdyyiamwnp.onion/zh/
  • proof: see tls/ssl certificate
  • check: ✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️

Deutsche Welle Persian 🔐

  • link: https://www.dwnewsvdyyiamwnp.onion/fa-ir/
  • plain: https://www.dwnewsvdyyiamwnp.onion/fa-ir/
  • proof: see tls/ssl certificate
  • check: ✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️

Deutsche Welle Russian 🔐

  • link: https://www.dwnewsvdyyiamwnp.onion/ru/
  • plain: https://www.dwnewsvdyyiamwnp.onion/ru/
  • proof: see tls/ssl certificate
  • check: ✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️

Deutsche Welle Turkish 🔐

  • link: https://www.dwnewsvdyyiamwnp.onion/tr/
  • plain: https://www.dwnewsvdyyiamwnp.onion/tr/
  • proof: see tls/ssl certificate
  • check: ✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️

ProPublica 🔐

Radio Free Asia: Cantonese 🔐

https://www.rfa.org/about/releases/mirror_websites-04172020105949.html

Radio Free Asia: English 🔐

https://www.rfa.org/about/releases/mirror_websites-04172020105949.html

Radio Free Asia: Mandarin 🔐

https://www.rfa.org/about/releases/mirror_websites-04172020105949.html

The New York Times 🔐

taz 🔧

  • link: http://ibpj4qv7mufde33w.onion/
  • plain: http://ibpj4qv7mufde33w.onion/
  • proof: see onion-location header
  • check: ✅✅✅✅✅✅✅✅✅✅✅✅✅✅

Tech And Software

Brave (Web Browser) 🔐

  • link: https://brave5t5rjjg3s6k.onion/
  • plain: https://brave5t5rjjg3s6k.onion/
  • proof: see tls/ssl certificate
  • check: ✅✅✅✅✅✅✅✅✅✅✅✅✅✅

DEF CON Groups 🔧

DEF CON Home 🔧

DEF CON Media 🔧

Debian Home 🔧

Debian Onion Index 🔧

everything debian

ExpressVPN 🔧

Mailpile 🔧

OnionShare 🔧

Qubes OS 🔧

Tor Project Home 🔧

Tor Project Onion Index 🔧

everything tor

Whonix Forums 🔧

Whonix Home 🔧

keybase.io 🔧

Web And Internet

Archive Today (archive.is) 🔧

Cloudflare Public DNS 1.1.1.1 🔐

DuckDuckGo 🔐

  • link: https://3g2upl4pq6kufc4m.onion/
  • plain: https://3g2upl4pq6kufc4m.onion/
  • proof: see tls/ssl certificate
  • check: ✅✅✅✅✅✅✅✅✅✅✅✅✅✅

Facebook 🔐

Facebook Mobile 🔐

Internet Archive (archive.org) 🔐

Mail2Tor 🔧

Protonmail 🔐

  • link: https://protonirockerxow.onion/
  • plain: https://protonirockerxow.onion/
  • proof: see tls/ssl certificate
  • check: ✅✅✅✅✅✅✅✅✅✅✅✅✅✅

Globaleaks

ALAT / Allerta AntiCorruzione 🔧

italian whistleblowing

  • link: http://fkut2p37apcg6l7f.onion/
  • plain: http://fkut2p37apcg6l7f.onion/
  • proof: link
  • check: ✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️

Afrileaks 🔧

  • link: http://wcnueib4qrsm544n.onion/
  • plain: http://wcnueib4qrsm544n.onion/
  • proof: link
  • check: ✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️

Atlatszo MagyarLeaks 🔧

hungarian leaks

Bezkorupce.cz 🔧

czech anticorruption reporting site

Mexico Leaks 🔧

  • link: http://kjpkmlafh2ra57wz.onion/
  • plain: http://kjpkmlafh2ra57wz.onion/
  • proof: link
  • check: ✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️

Pistaljka.rs Whistleblowing 🔧

Securedrop For Individuals

Jean-Marc Manach 🔧

Securedrop For Organisations

2600: The Hacker Quarterly 🔧

Adresseavisen 🔧

Aftenposten 🔧

Aftonbladet 🔐

  • link: https://y27vf7g2ce5g3fnl.onion/
  • plain: https://y27vf7g2ce5g3fnl.onion/
  • proof: see tls/ssl certificate
  • check: 🆘🆘🆘🆘🆘🆘🆘🆘🆘🆘🆘🆘🆘🆘

Al-Jazeera 🔧

Apache 🔧

Bergens Tidende 🔧

Bloomberg News 🔧

BuzzFeed 🔧

CBC / Canadian Broadcasting Corporation 🔧

Dagbladet 🔧

Financial Times 🔧

Forbes 🔧

Forbidden Stories 🔧

Gizmodo Media Group 🔧

Global Witness 🔧

Guardian 🔧

Heise Investigativ 🔧

Houston Chronicle 🔧

HuffPost 🔧

ICIJ / International Consortium of Investigative Journalists 🔧

Lucy Parsons Labs 🔧

McClatchy DC 🔧

NBCNews 🔧

NPR 🔧

NRK 🔧

New York Times 🔐

POGO 🔧

project on government oversight

Politico 🔧

Public Intelligence 🔧

RISE Moldova 🔧

Reflets.info 🔧

Reuters 🔧

San Francisco Chronicle 🔧

Slate 🔧

Svenska Dagbladet 🔧

The Daily Beast 🔧

The Globe and Mail (Toronto) 🔧

The Intercept 🔧

The Washington Post 🔐

Toronto Crime Stoppers 🔧

USA Today 🔐

VICE Media 🔧

Wall Street Journal 🔧

Whistleblower Aid 🔧

Wired 🔧

Žvižgač 🔧

slovenian whistleblower organisation

Flaky Sites

These sites have apparently stopped responding.

Ablative Hosting 🔐

Associated Press 🔧

Barton Gellman 🔧

Business Insider 🔧

Coworker.org 🔧

Fairfax Media Group (SMH et al.) 🔧

Field of Vision 🔧

Greenpeace New Zealand 🔧

Hardened BSD Onion Index 🔧

IRPILeaks 🔧

italian investigative reporting project

Institute for Quantitative Social Science at Harvard University 🔧

KUOW Public Radio 🔧

Meduza 🔧

MormonLeaks / FaithLeaks 🔧

Radio-Canada 🔧

Reporters Without Borders Helpdesk 🔐

Süddeutsche Zeitung 🔧

The Atlantic 🔧

The Telegraph 🔧

The Verge; Racked; Eater 🔧

VG / Verdens Gang 🔧

Wildleaks 🔧

elephant action league

XNet Activism 🔧

anticorruption whistleblowing

disclose.ngo 🔧

Footnotes

  • This file (README.md) is auto-generated
    • Do NOT submit changes NOR pull-requests for it
    • Please submit an Issue for consideration / change requests
  • If both v2 and v3 addresses are provided for a service, the v3 address will be preferred / cited
  • At the moment where an organisation runs 2+ onion addresses for closely related services that do not reflect distinct languages / national interests, I am posting a link to an index of their onions. Examples: Riseup, Systemli, TorProject, ...
  • The master list of Onion SSL EV Certificates may be viewed at https://crt.sh/?q=%25.onion

RWOS Status Detector

  • ✅ site up
  • ✳️ site up, and redirected to another page
  • 🚫 site up, but could not access the page
  • 🛑 site up, but reported a system error
  • 🆘 site returned no data, or is down, or curl experienced a transient network error (may be a problem with the RWOS server connection)
  • 🆕 site is newly added, no data yet

You can also see the history of updates.

Codes & Exit Statuses

Mouse-over the icons for details of HTTP codes, curl exit statuses, and the number of attempts made on each site.

TLS Security

Due to the fundamental protocol differences between HTTP and HTTPS, it is not wise to consider HTTP-over-Onion to be "as secure as HTTPS"; web browsers do and must treat HTTPS requests in ways that are fundamentally different to HTTP, e.g.:

  • with respect to cookie handling, or
  • where the trusted connection terminates, or
  • how to deal with loading embedded insecure content, or
  • whether to permit access to camera and microphone devices (WebRTC)

...and the necessity of broad adherence to web standards would make it harmful to attempt to optimise just one browser (e.g. Tor Browser) to elevate HTTP-over-Onion to the same levels of trust as HTTPS-over-TCP, let alone HTTPS-over-Onion. Doubtless some browsers will attempt to implement "better-than-default trust and security via HTTP over onions", but this behaviour will not be standard, cannot be relied upon by clients/users, and will therefore be risky.

tl;dr - HTTP-over-Onion should not be considered as secure as HTTPS-over-Onion, and attempting to force it thusly will create a future compatibility mess for the ecosystem of onion-capable browsers.

  • 🔧 semi-secure HTTP Onion site, protected by Onion circuits at best; will not respect browser secure/HTTPS behaviour
  • 🔐 secure HTTPS Onion site, protected by both Onion circuits and TLS, will respect browser secure/HTTPS behaviour

Feedback

The issues page is the fastest and most effective way to submit a suggestion; if you lack a Github account, try messaging @alecmuffett on Twitter.

Back to Top