On Tue, 16 Jun 2020 at 12:15, meskio meskio@sindominio.net wrote:
I'm wondering if it will make sense to use Onion-Location in V2 onion services to advertise the V3 onion. So existing known V2 services can use it to upgrade their users to V3.
AFAIK right now tor-browser ignores the Onion-Location header if is already coming from an onion service. Will it make sense to stop ignoring it at least for V2 onion services?
Or the site could just issue a Location header and/or explicit redirect to the v3 service?
After all, if the v2 site is compromised to the point where that's a problem, then there are larger issues / "game over", etc.
-a