real-world-onion-sites/README.md
2019-12-05 16:15:10 +00:00

193 KiB

Real-World Onion Sites

This is a list of substantial, commercial-or-social-good mainstream websites which provide onion services.

  • no sites with an "onion-only" presence
  • no sites for tech with less than (arbitrary) 10,000 users
  • no nudity, exploitation, drugs, copyright infringement or sketchy-content sites
  • the editor reserves all rights to annotate or drop any or all entries as deemed fit
  • updated: see the change history for specifics
  • licensed: cc-by-sa
  • author/editor: alec muffett

Notes

  • If both v2 and v3 addresses are provided for a service, the v3 address will be preferred / cited
  • The master list of Onion SSL EV Certificates may be viewed at https://crt.sh/?q=%25.onion
  • This file (README.md) is auto-generated; do not submit changes nor pull-requests for it
    • Please submit an Issue for consideration / change requests

RWOS Status Detector

  • site up
  • ✳️ site up, and redirected to another page
  • 🚫 site up, but could not access the page
  • 🛑 site up, but reported a system error
  • 🆘 site returned no data, or is down, or curl experienced a transient network error
  • 🆕 site is newly added, no data yet

You can also see the history of updates.

Codes & Exit Statuses

Mouse-over the icons for details of HTTP codes, curl exit statuses, and the number of attempts made on each site.

TLS Security

  • 🔧 semi-secure HTTP Onion site, protected by Onion circuits at best; will not respect browser secure/HTTPS behaviour
  • 🔐 secure HTTPS Onion site, protected by both Onion circuits and TLS, will respect browser secure/HTTPS behaviour

Due to the fundamental protocol differences between HTTP and HTTPS, it is not wise to consider HTTP-over-Onion to be "as secure as HTTPS"; web browsers do and must treat HTTPS in ways that are fundamentally more secure than HTTP - e.g.: with respect to cookie handling or loading insecure content - and the necessity of broad adherence to web standards would make it harmful to attempt to optimise just one browser (Tor Browser) to elevate HTTP-over-Onion to the same levels of trust as HTTPS-over-TCP, let alone HTTPS-over-Onion.

tl;dr - HTTP-over-Onion is not as secure as HTTPS-over-Onion, and attempting to force it to be so will create a compatibility mess for the ecosystem of onion-capable browsers.


Index


Civil Society And Community

Privacy International 🔐

  • link: https://privacyintyqcroe.onion/
  • plain: https://privacyintyqcroe.onion/
  • proof: see tls/ssl certificate
  • check:

Riseup Home 🔧

Riseup Onion Index 🔧

provides shared notepad, file sharing, code hosting, and other services

Systemli Home 🔧

Systemli Onion Index 🔧

provides shared notepad, spreadsheet, pastebin, and other services


Companies And Services

decoded:Legal 🔧

english law firm


Education

BBC Learning English 🔧

includes resources for many languages

BBC Learning English: Mandarin 🔧


Government

US Central Intelligence Agency 🔧


News And Media

BBC News 🔐

BBC News Arabic | عربى 🔐

BBC News Chinese | 中文 🔐

BBC News Persian | فارسی 🔐

BBC News Pidgin 🔐

BBC News Russian | Русская 🔐

BBC News Turkish | Türkçe 🔐

BBC News Vietnamese | Tiếng Việt 🔐

BBC News | In Your Language 🔐

language index

BuzzFeed News 🔐

  • link: https://bfnews3u2ox4m4ty.onion/
  • plain: https://bfnews3u2ox4m4ty.onion/
  • proof: see tls/ssl certificate
  • check:

Deutsche Welle 🔐

also, see language index in titlebar

Deutsche Welle Arabic 🔐

  • link: https://www.dwnewsvdyyiamwnp.onion/ar/
  • plain: https://www.dwnewsvdyyiamwnp.onion/ar/
  • proof: see tls/ssl certificate
  • check: ✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️

Deutsche Welle Chinese 🔐

  • link: https://www.dwnewsvdyyiamwnp.onion/zh/
  • plain: https://www.dwnewsvdyyiamwnp.onion/zh/
  • proof: see tls/ssl certificate
  • check: ✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️

Deutsche Welle Persian 🔐

  • link: https://www.dwnewsvdyyiamwnp.onion/fa-ir/
  • plain: https://www.dwnewsvdyyiamwnp.onion/fa-ir/
  • proof: see tls/ssl certificate
  • check: ✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️

Deutsche Welle Russian 🔐

  • link: https://www.dwnewsvdyyiamwnp.onion/ru/
  • plain: https://www.dwnewsvdyyiamwnp.onion/ru/
  • proof: see tls/ssl certificate
  • check: ✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️

Deutsche Welle Turkish 🔐

  • link: https://www.dwnewsvdyyiamwnp.onion/tr/
  • plain: https://www.dwnewsvdyyiamwnp.onion/tr/
  • proof: see tls/ssl certificate
  • check: ✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️✳️

ProPublica 🔐

Reporters Without Borders Helpdesk 🔐

The New York Times 🔐


Tech And Software

Ablative Hosting 🔐

DEF CON Groups 🔧

DEF CON Home 🔧

DEF CON Media 🔧

Debian Home 🔧

Debian Onion Index 🔧

everything debian

ExpressVPN 🔧

Mailpile 🔧

OnionShare 🔧

Qubes OS 🔧

Tor Project Home 🔧

Tor Project Onion Index 🔧

everything tor

Whonix Forums 🔧

Whonix Home 🔧

keybase.io 🔧


Web And Internet

Archive Today (archive.is) 🔧

Cloudflare Public DNS 1.1.1.1 🔐

DuckDuckGo 🔐

  • link: https://3g2upl4pq6kufc4m.onion/
  • plain: https://3g2upl4pq6kufc4m.onion/
  • proof: see tls/ssl certificate
  • check: 🆘

Facebook 🔐

Facebook Mobile 🔐

Internet Archive (archive.org) 🔧

Mail2Tor 🔧

Protonmail 🔐

  • link: https://protonirockerxow.onion/
  • plain: https://protonirockerxow.onion/
  • proof: see tls/ssl certificate
  • check:

Globaleaks

ALAT / Allerta AntiCorruzione 🔧

italian whistleblowing

Afrileaks 🔧

Atlatszo MagyarLeaks 🔧

hungarian leaks

Bezkorupce.cz 🔧

czech anticorruption reporting site

Mexico Leaks 🔧

Pistaljka.rs Whistleblowing 🔧

Wildleaks 🔧

elephant action league

XNet Activism 🔧

anticorruption whistleblowing


Securedrop For Individuals

Barton Gellman 🔧

Jean-Marc Manach 🔧


Securedrop For Organisations

2600: The Hacker Quarterly 🔧

Adresseavisen 🔧

Aftenposten 🔧

Aftonbladet 🔐

  • link: https://y27vf7g2ce5g3fnl.onion/
  • plain: https://y27vf7g2ce5g3fnl.onion/
  • proof: see tls/ssl certificate
  • check:

Al-Jazeera 🔧

Apache 🔧

Bergens Tidende 🔧

Bloomberg News 🔧

BuzzFeed 🔧

CBC / Canadian Broadcasting Corporation 🔧

Coworker.org 🔧

Dagbladet 🔧

Field of Vision 🔧

Financial Times 🔧

Forbes 🔧

Forbidden Stories 🔧

Gizmodo Media Group 🔧

Global Witness 🔧

Guardian 🔧

Heise Investigativ 🔧

Houston Chronicle 🔧

HuffPost 🔧

ICIJ / International Consortium of Investigative Journalists 🔧

Institute for Quantitative Social Science at Harvard University 🔧

KUOW Public Radio 🔧

Lucy Parsons Labs 🔧

McClatchy DC 🔧

Meduza 🔧

NBCNews 🔧

NPR 🔧

NRK 🔧

New York Times 🔐

POGO 🔧

project on government oversight

Politico 🔧

Public Intelligence 🔧

RISE Moldova 🔧

Reflets.info 🔧

Reuters 🔧

San Francisco Chronicle 🔧

Slate 🔧

Svenska Dagbladet 🔧

Süddeutsche Zeitung 🔧

The Daily Beast 🔧

The Globe and Mail (Toronto) 🔧

The Intercept 🔧

The Washington Post 🔐

Toronto Crime Stoppers 🔧

USA Today 🔐

VG / Verdens Gang 🔧

VICE Media 🔧

Wall Street Journal 🔧

Whistleblower Aid 🔧

Wired 🔧

disclose.ngo 🔧

Žvižgač 🔧

slovenian whistleblower organisation


Flaky Sites

These sites have apparently stopped responding.

Associated Press 🔧

Business Insider 🔧

Fairfax Media Group (SMH et al.) 🔧

Greenpeace New Zealand 🔧

Hardened BSD 🔧

Hardened BSD 🔧

IRPILeaks 🔧

italian investigative reporting project

MormonLeaks / FaithLeaks 🔧

Radio-Canada 🔧

The Atlantic 🔧

The Telegraph 🔧

The Verge; Racked; Eater 🔧

Don't have a GitHub account?

GitHub is certainly the fastest and most effective way to submit a suggestion; if you lack that, try @alecmuffett on Twitter.