Browse Source

More explanation about what the onion build option means #71

Bob Mottram 7 years ago
parent
commit
9de00eea27
4 changed files with 18 additions and 12 deletions
  1. 2
    2
      doc/EN/beaglebone.org
  2. 5
    3
      doc/EN/homeserver.org
  3. 3
    3
      website/EN/beaglebone.html
  4. 8
    4
      website/EN/homeserver.html

+ 2
- 2
doc/EN/beaglebone.org View File

70
 Or of you want a system where the services are only accessible via onion addresses.
70
 Or of you want a system where the services are only accessible via onion addresses.
71
 
71
 
72
 #+begin_src
72
 #+begin_src
73
-freedombone-image -t beaglebone --onion yes
73
+freedombone-image -t beaglebone --onion-addresses-only yes
74
 #+end_src
74
 #+end_src
75
 
75
 
76
-Onion addresses have the advantage of being difficult to censor and you don't need to buy a domain or have a dynamic DNS account. An onion based system also means you don't need to think about NAT traversal type issues.
76
+Onion addresses have the advantage of being difficult to censor and you don't need to buy a domain or have a dynamic DNS account. An onion based system also means you don't need to think about NAT traversal type issues. This *does not* mean that everything gets routed through Tor, it just means that the sites for apps which you install will be available through Tor's address system.
77
 
77
 
78
 #+BEGIN_CENTER
78
 #+BEGIN_CENTER
79
 [[file:images/bbb_back.jpg]]
79
 [[file:images/bbb_back.jpg]]

+ 5
- 3
doc/EN/homeserver.org View File

26
 git checkout stretch
26
 git checkout stretch
27
 sudo make install
27
 sudo make install
28
 freedombone-image --setup debian
28
 freedombone-image --setup debian
29
-freedombone-image -t i386 --onion yes
29
+freedombone-image -t i386 --onion-addresses-only yes
30
 #+end_src
30
 #+end_src
31
 
31
 
32
 Or on Arch/Parabola:
32
 Or on Arch/Parabola:
38
 git checkout stretch
38
 git checkout stretch
39
 sudo make install
39
 sudo make install
40
 freedombone-image --setup parabola
40
 freedombone-image --setup parabola
41
-freedombone-image -t i386 --onion yes
41
+freedombone-image -t i386 --onion-addresses-only yes
42
 #+end_src
42
 #+end_src
43
 
43
 
44
 Now prepare your local system to talk to the freedombone by running the following command. This will set up avahi and create ssh keys if necessary.
44
 Now prepare your local system to talk to the freedombone by running the following command. This will set up avahi and create ssh keys if necessary.
51
 [[file:images/tor_onion.jpg]]
51
 [[file:images/tor_onion.jpg]]
52
 #+END_CENTER
52
 #+END_CENTER
53
 
53
 
54
-The version in which sites are available only via onion addresses is the easiest to get started with, since you can evaluate the system without committing to buying an ICANN domain name or needing to get involved with SSL/TLS certificates at all. However, if you do want your sites to be available typically as subdomains of a domain name which you own then remove the *--onion yes* option from the last command shown above. Also see the [[./domains.html][guide on setting up an ICANN domain name]].
54
+The version in which sites are available only via onion addresses is the easiest to get started with, since you can evaluate the system without committing to buying an ICANN domain name or needing to get involved with SSL/TLS certificates at all. However, if you do want your sites to be available typically as subdomains of a domain name which you own then remove the *--onion-addresses-only yes* option from the last command shown above. Also see the [[./domains.html][guide on setting up an ICANN domain name]].
55
+
56
+The *onion-addresses-only* option *does not* mean that everything gets routed through Tor. It's intended to provide accessible web apps with minimum fuss and without needing to buy a clearnet domain name or mess with forwarding ports. Using apps via their onion addresses may provide some degree of anonymity but it may not be perfect and anonymity isn't the aim of this system (if you want that then use [[https://tails.boum.org/][TAILS]]).
55
 
57
 
56
 If you want to create images for microSD cards used within various single board computers then replace the *i386* with *beaglebone* / *cubieboard2* / *cubietruck* / *a20-olinuxino-lime* / *a20-olinuxino-lime2* / *a20-olinuxino-micro* or *apu*.
58
 If you want to create images for microSD cards used within various single board computers then replace the *i386* with *beaglebone* / *cubieboard2* / *cubietruck* / *a20-olinuxino-lime* / *a20-olinuxino-lime2* / *a20-olinuxino-micro* or *apu*.
57
 
59
 

+ 3
- 3
website/EN/beaglebone.html View File

3
 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
3
 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
4
 <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
4
 <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
5
 <head>
5
 <head>
6
-<!-- 2017-07-03 Mon 12:29 -->
6
+<!-- 2017-09-12 Tue 09:56 -->
7
 <meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
7
 <meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
8
 <meta name="viewport" content="width=device-width, initial-scale=1" />
8
 <meta name="viewport" content="width=device-width, initial-scale=1" />
9
 <title></title>
9
 <title></title>
330
 </p>
330
 </p>
331
 
331
 
332
 <pre class="example">
332
 <pre class="example">
333
-freedombone-image -t beaglebone --onion yes
333
+freedombone-image -t beaglebone --onion-addresses-only yes
334
 </pre>
334
 </pre>
335
 
335
 
336
 <p>
336
 <p>
337
-Onion addresses have the advantage of being difficult to censor and you don't need to buy a domain or have a dynamic DNS account. An onion based system also means you don't need to think about NAT traversal type issues.
337
+Onion addresses have the advantage of being difficult to censor and you don't need to buy a domain or have a dynamic DNS account. An onion based system also means you don't need to think about NAT traversal type issues. This <b>does not</b> mean that everything gets routed through Tor, it just means that the sites for apps which you install will be available through Tor's address system.
338
 </p>
338
 </p>
339
 
339
 
340
 <div class="org-center">
340
 <div class="org-center">

+ 8
- 4
website/EN/homeserver.html View File

3
 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
3
 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
4
 <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
4
 <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
5
 <head>
5
 <head>
6
-<!-- 2017-07-03 Mon 12:29 -->
6
+<!-- 2017-09-12 Tue 10:06 -->
7
 <meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
7
 <meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
8
 <meta name="viewport" content="width=device-width, initial-scale=1" />
8
 <meta name="viewport" content="width=device-width, initial-scale=1" />
9
 <title></title>
9
 <title></title>
262
 git checkout stretch
262
 git checkout stretch
263
 sudo make install
263
 sudo make install
264
 freedombone-image --setup debian
264
 freedombone-image --setup debian
265
-freedombone-image -t i386 --onion yes
265
+freedombone-image -t i386 --onion-addresses-only yes
266
 </code></pre>
266
 </code></pre>
267
 </div>
267
 </div>
268
 
268
 
277
 git checkout stretch
277
 git checkout stretch
278
 sudo make install
278
 sudo make install
279
 freedombone-image --setup parabola
279
 freedombone-image --setup parabola
280
-freedombone-image -t i386 --onion yes
280
+freedombone-image -t i386 --onion-addresses-only yes
281
 </code></pre>
281
 </code></pre>
282
 </div>
282
 </div>
283
 
283
 
299
 </div>
299
 </div>
300
 
300
 
301
 <p>
301
 <p>
302
-The version in which sites are available only via onion addresses is the easiest to get started with, since you can evaluate the system without committing to buying an ICANN domain name or needing to get involved with SSL/TLS certificates at all. However, if you do want your sites to be available typically as subdomains of a domain name which you own then remove the <b>&#x2013;onion yes</b> option from the last command shown above. Also see the <a href="./domains.html">guide on setting up an ICANN domain name</a>.
302
+The version in which sites are available only via onion addresses is the easiest to get started with, since you can evaluate the system without committing to buying an ICANN domain name or needing to get involved with SSL/TLS certificates at all. However, if you do want your sites to be available typically as subdomains of a domain name which you own then remove the <b>&#x2013;onion-addresses-only yes</b> option from the last command shown above. Also see the <a href="./domains.html">guide on setting up an ICANN domain name</a>.
303
+</p>
304
+
305
+<p>
306
+The <b>onion-addresses-only</b> option <b>does not</b> mean that everything gets routed through Tor. It's intended to provide accessible web apps with minimum fuss and without needing to buy a clearnet domain name or mess with forwarding ports. Using apps via their onion addresses may provide some degree of anonymity but it may not be perfect and anonymity isn't the aim of this system (if you want that then use <a href="https://tails.boum.org/">TAILS</a>).
303
 </p>
307
 </p>
304
 
308
 
305
 <p>
309
 <p>