Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Clarify the difference between a Landing Page address and securedrop.org's .onion address within the Source Guide #424

Open
nathandyer opened this issue Feb 13, 2023 · 0 comments

Comments

@nathandyer
Copy link
Contributor

Because we offer a version of securedrop.org as an onion service, sources see that address (hash) in the URL bar within Tor Browser. When they open the directory and view a listing, they see a different address for a given organization's Landing Page. It's possible that they might mistakenly assume the directory entry they are viewing is the Landing Page, and note that the two addresses don't match, and believe there is a security issue.

We link to the Source Guide in our documentation from directory entries on securedrop.org, so we should probably add an explanation for that within the documentation to help avoid this confusion.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant