www.dash.org

AjM

Well-known Member
Foundation Member
Jun 23, 2014
1,341
575
283
Finland
Does not look good to visitors, maintenance info would be nice in there.
dashpay.io is redirecting to dash.org, and bottom link should be updated to dash.org.

edit: typos
 

Bridgewater

Well-known Member
Foundation Member
Dec 14, 2014
183
164
203
The SSL cert for https://dash.org seems to be different than the one for https://www.dash.org (which works).

This Connection is Untrusted
(Error code: ssl_error_bad_cert_domain)
Why don't we have a .onion?

For people who don't trust PKI, a unique .onion hidden service would be easy to implement and would put many security-conscious users at ease.

Since most users are downloading precombiled binaries, a custom .onion address that is impossible to man-in-the-middle (because only the server owner holds the private key for it) would be awesome. That would solve a lot of headeaches for people trying to learn PGP verification and such.
 

fernando

Powered by Dash
Dash Core Team
Moderator
Foundation Member
May 9, 2014
1,527
2,058
283
Thanks for the pings. DNS setup broke while Evan was doing some maintenance, nothing serious :)
 
  • Like
Reactions: tungfa

fernando

Powered by Dash
Dash Core Team
Moderator
Foundation Member
May 9, 2014
1,527
2,058
283
The SSL cert for https://dash.org seems to be different than the one for https://www.dash.org (which works).



Why don't we have a .onion?

For people who don't trust PKI, a unique .onion hidden service would be easy to implement and would put many security-conscious users at ease.

Since most users are downloading precombiled binaries, a custom .onion address that is impossible to man-in-the-middle (because only the server owner holds the private key for it) would be awesome. That would solve a lot of headeaches for people trying to learn PGP verification and such.
That make sense, but it is more work and things to keep up to date. If there were a lot of people with this need I'd say go for it, but atm I think this would help a very reduced group of people and I believe it is more useful to concentrate in more wide reaching actions. We are spread quite thin to maintain a lot of assets, so we need to prioritize. However, if someone is willing to go down this rabbit hole, please explain what you need and we will try to help.
 

Bridgewater

Well-known Member
Foundation Member
Dec 14, 2014
183
164
203
Yeah, I know you guys have a lot on your plate at the moment. It was just something I thought of after realizing how well it solves potential man-in-the-middle attacks.

There is actually very little work involved, if anyone has the inspiration to spend a few minutes on it.
All you need to do is install and run Tor directly on the same webserver that hosts the current site, create a .onion address with private key, then edit the tor config file to point all incoming tor requests from your .onion address to 127.0.0.1:8080. https://www.torproject.org/docs/tor-hidden-service.html.en

As far as the "need" goes, the real benefit of having a .onion address would not come from satisfying current users needs, but rather from attracting more Tor users to Dash. It is no secret that tor users are heavily into crypto (or vice versa). Doing this would simply add a little extra emphasis to the fact that our community cares about security and privacy; it would have value as marketing.

Even Facebook now has an .onion--which reminds me: another benefit is that it allows people in other countries who might be blocked from specific sites (like what happened to bitcoin.org in Russia last year) to connect directly without DNS.
 

fernando

Powered by Dash
Dash Core Team
Moderator
Foundation Member
May 9, 2014
1,527
2,058
283
Yeah, I know you guys have a lot on your plate at the moment. It was just something I thought of after realizing how well it solves potential man-in-the-middle attacks.

There is actually very little work involved, if anyone has the inspiration to spend a few minutes on it.
All you need to do is install and run Tor directly on the same webserver that hosts the current site, create a .onion address with private key, then edit the tor config file to point all incoming tor requests from your .onion address to 127.0.0.1:8080. https://www.torproject.org/docs/tor-hidden-service.html.en

As far as the "need" goes, the real benefit of having a .onion address would not come from satisfying current users needs, but rather from attracting more Tor users to Dash. It is no secret that tor users are heavily into crypto (or vice versa). Doing this would simply add a little extra emphasis to the fact that our community cares about security and privacy; it would have value as marketing.

Even Facebook now has an .onion--which reminds me: another benefit is that it allows people in other countries who might be blocked from specific sites (like what happened to bitcoin.org in Russia last year) to connect directly without DNS.
That is great, thanks! I thought there was more work involved. I can't promise anything because even the simplest task always has unforseen complications, but I will definitely look into it with some more calm in the near future :)
 

tungfa

Grizzled Member
Foundation Member
Masternode Owner/Operator
Apr 9, 2014
8,902
6,737
1,283
can't you 'auto correct script' that
:rolleyes:
(beep beep)
 
  • Like
Reactions: fernando

Bridgewater

Well-known Member
Foundation Member
Dec 14, 2014
183
164
203
Something like this?

http://dashorg64cjvj4s3.onion

We'll need to create a special Tor version of the website though, as there are still many reference to dash.org on the original site...
Awesome. It works!!!

If full website navigation is going to take a while to implement, IMO the most important link to get working first is http://dashorg64cjvj4s3.onion/downloads/, so users can easily download the wallet without fear of MITM (as long as they visually double-check the full onion address--not just the first 7 letters--before proceeding).
 

tungfa

Grizzled Member
Foundation Member
Masternode Owner/Operator
Apr 9, 2014
8,902
6,737
1,283
please let me know when the Tor link is up and running and i do a PR run with that
('Light and dark" Net)
 

flare

Administrator
Dash Core Team
Moderator
May 18, 2014
2,286
2,404
1,183
Germany
Awesome. It works!!!

If full website navigation is going to take a while to implement, IMO the most important link to get working first is http://dashorg64cjvj4s3.onion/downloads/, so users can easily download the wallet without fear of MITM (as long as they visually double-check the full onion address--not just the first 7 letters--before proceeding).
please let me know when the Tor link is up and running and i do a PR run with that
('Light and dark" Net)
I think i got it, could you please check. There are still some legacy references to dashpay.io/dash.org in the code, but 90% of the site should work now.

--> http://dashorg64cjvj4s3.onion
 
  • Like
Reactions: alex-ru

tungfa

Grizzled Member
Foundation Member
Masternode Owner/Operator
Apr 9, 2014
8,902
6,737
1,283
Runs like 'kidden'
(did test download wallet and all, will check with the chinese if this helps for them)
tx flare

question
this warning is a TOR thing ? nothing we can do ?
(i do not mind, just asking)
 

flare

Administrator
Dash Core Team
Moderator
May 18, 2014
2,286
2,404
1,183
Germany
Runs like 'kidden'
(did test download wallet and all, will check with the chinese if this helps for them)
tx flare

question
this warning is a TOR thing ? nothing we can do ?
(i do not mind, just asking)
Yeah, i guess that's a Tor thing - getting rid of this would involve a redesign of the site i guess.
 

tungfa

Grizzled Member
Foundation Member
Masternode Owner/Operator
Apr 9, 2014
8,902
6,737
1,283
Yeah, i guess that's a Tor thing - getting rid of this would involve a redesign of the site i guess.
ja no worries
you want me to check for dashpay links or all good ?

there are obviously a bunch of wiki.dashpay links and eventually (i guess one day) we could mirror the whole wiki over there ?!?


Edit:
i found some www.dashpay/download.... but am not sure if it is worth changing them all (old release announcements and such)
 

flare

Administrator
Dash Core Team
Moderator
May 18, 2014
2,286
2,404
1,183
Germany
ja no worries
you want me to check for dashpay links or all good ?

there are obviously a bunch of wiki.dashpay links and eventually (i guess one day) we could mirror the whole wiki over there ?!?
If you find references to dashpay.io and/or dash.org let me know.

Sure, we could create a Tor mirror of the wiki as well.
 

tungfa

Grizzled Member
Foundation Member
Masternode Owner/Operator
Apr 9, 2014
8,902
6,737
1,283
If you find references to dashpay.io and/or dash.org let me know.
Ok i send you a list later on

Sure, we could create a Tor mirror of the wiki as well.
I think that would be amazing !

question
are we the only Team with 'real' names on the darkness ?
does not matter , right, we are out anyway :rolleyes:
 

tungfa

Grizzled Member
Foundation Member
Masternode Owner/Operator
Apr 9, 2014
8,902
6,737
1,283

flare

Administrator
Dash Core Team
Moderator
May 18, 2014
2,286
2,404
1,183
Germany
so this is a mirror ? whatever we change on dash.org goes straight to onion style ?
It's a static export of dash.org - updating dash.org involves one click to update the onion-site as well.

we can do the same with the wiki?
Wiki is a bit different, need to look at this first.

could we link the wiki to http://dashorg64cjvj4s3.onion ?
(to keep it all together)
Mirroring the wiki would give us a new .onion address, these are separate sites.

- Can we get the iPhone Wallet on
https://www.dash.org/downloads/
?
i can get you all links and a small pic ?
We can't distribute a iPhone binary, as this would break the Apple Appstore EULA - and i'd rather not mess with them.
 

tungfa

Grizzled Member
Foundation Member
Masternode Owner/Operator
Apr 9, 2014
8,902
6,737
1,283
It's a static export of dash.org - updating dash.org involves one click to update the onion-site as well.
:D
Wiki is a bit different, need to look at this first.
Mirroring the wiki would give us a new .onion address, these are separate sites.
if not too much work i think that would be nice (different address or not)

i am checking all old dark coin onion links and there is pretty much nothing left, so there is a bunch of work to do (new wiki, reddit,.... ) i look into that

We can't distribute a iPhone binary, as this would break the Apple Appstore EULA - and i'd rather not mess with them.
I would just post it like this:

iPhone – DashWallet v.0.8.8
https://dashpay.atlassian.net/wiki/display/DOC/iPhone - DashWallet v.0.8.8
 

Bridgewater

Well-known Member
Foundation Member
Dec 14, 2014
183
164
203
Runs like 'kidden'
(did test download wallet and all, will check with the chinese if this helps for them)
tx flare

question
this warning is a TOR thing ? nothing we can do ?
(i do not mind, just asking)
That's normal behavior for the current Tor browser. Just click "Never for this site"
 
  • Like
Reactions: tungfa

tungfa

Grizzled Member
Foundation Member
Masternode Owner/Operator
Apr 9, 2014
8,902
6,737
1,283
Last edited by a moderator:

AjM

Well-known Member
Foundation Member
Jun 23, 2014
1,341
575
283
Finland
Any news about new official web site, when we will see it online?
And how about this forum, any chance to transfer this to new site?