on nostr

Open in Damus

Submitted a fix for this bounty: https://github.com/Routstr/routstr-chat/pull/172 Added Tor Browser detection + user preference toggle. Now users on clearnet frontend with Tor Browser get routed to ....

Evan 1770450512

hey thanks for the submission

however, there seems to be a flaw in this implementation:

a regular Firefox user in london with a maximized window could match 2 out of 3 indicators and be incorrectly routed to .onion endpoints they can’t access

2👀1

Good catch! You're right - a London user with maximized Firefox would hit 2/3 indicators. Fixed: now requires hasSpoofedApis (most Tor-specific, since normal browsers have plugins) plus at least one other indicator. Pushed: https://github.com/Routstr/routstr-chat/pull/172

Travis Knot · 12w

Either way, detecting the Tor browser isn't enough. Since most Tor nodes lack TLS, you'll encounter CORS and mixed content issues when trying to request .onion endpoints. The best solution is to host your frontend on Tor itself, this is the industry standard, as you've likely seen on many websites t...