洋葱服务

当浏览一项洋葱服务时,Tor 浏览器会在地址栏展示不同的洋葱图标,来表示当前网站的安全等级。

Image of an onion An onion means:

  • The Onion Service is served over HTTP, or HTTPS with a CA-Issued certificate.
  • The Onion Service is served over HTTPS with a Self-Signed certificate.

Image of an onion with a red slash An onion with a red slash means:

  • The Onion Service is served with a script from an insecure URL.

Image of an onion with a caution sign An onion with caution sign means:

  • The Onion Service is served over HTTPS with an expired Certificate
  • The Onion Service is served over HTTPS with a wrong Domain
  • The Onion Service is served with a mixed form over an insecure URL

没错!我们洋葱服务的名单可以在 onion.torproject.org 上找到。

如果无法访问您想访问的洋葱服务,请检查是否正确输入了洋葱地址的16个字符(或者新版地址的56个字符)。只要有一点点错误,Tor 浏览器就无法连接到网站。 如果你仍然无法访问这个洋葱服务,请稍后重试。 有可能是网络连接有出现暂时性阻碍,或者是该网站的管理员在没有提示的情况下关闭了网站。

您可以通过连接至 [DuckDuck 的洋葱服务器](http://3g2upl4pq6kufc4m.onion来确保您可以访问其他洋葱服务器。

洋葱服务允许人们匿名的访问和发表信息,包括架设匿名网站。

洋葱服务还被依赖于提供一系列的服务:去元数据式的聊天,文件共享,利用诸如[SecureDrop] (https://securedrop.org/) 或[洋葱共享] (https://onionshare.org/) 进行的记者之间的互动和资源共享,更安全的软件升级,和更安全的访问如[Facebook] (https://www.facebook.com/notes/protect-the-graph/making-connections-to-facebook-more-secure/1526085754298237/) 这样网页的渠道。

这些服务使用特殊的顶级域名(TLD) .onion (而不是.com .net .org等)而且这些服务只有在 Tor 网络 里可以连接。

When accessing a website that uses an onion service, Tor Browser will show at the URL bar an icon of an onion displaying the state of your connection: secure and using an onion service.

洋葱图标

只能通过 Tor 访问的网站称作“洋葱服务”,它们以 .onion 结尾。 例如说,DuckDuckGo的洋葱地址是https://3g2upl4pq6kufc4m.onion. 您可以用 Tor 浏览器访问这些网站。 因为洋葱服务并不能像普通的网站一样被索引,所以必须由网站所有者把洋葱服务的地址分享给你。

Onion-Location is a new HTTP header that web sites can use to advertise their onion counterpart. If the web site that you're visiting has an onion site available, a purple suggestion pill will prompt at the URL bar saying ".onion available". When you click on ".onion available", the web site will be reloaded and redirected to its onion counterpart. At the moment, Onion-Location is available for Tor Browser desktop (Windows, macOS and GNU/Linux). You can learn more about Onion-Location in the Tor Browser Manual. If you're an onion service operator, learn how to configure Onion-Location in your onion site.

An authenticated onion service is an onion service that requires you to provide an authentication token (in this case, a private key) before accessing the service. The private key is not transmitted to the service, and it's only used to decrypt its descriptor locally. You can get the access credentials from the onion service operator. Reach out to the operator and request access. Learn more about how to use onion authentication in Tor Browser. If you want to create an onion service with client authentication, please see the Client Authorization in the Community portal.