PSA: In ~7 months ANY #tor #onion v2 will stop working entirely.
https://mastodon.social/@torproject/105844046100962614 does say:
"Onion services v2 are retiring."
But at least I failed to realize the impact of that.
That same toot talks about "deprecation" and that led me to underestimate the impact.
To put it in terms of RFC 2119 (https://tools.ietf.org/html/rfc2119):
You MUST, not SHOULD, upgrade all (your) Tor sites to onion v3 in about 7 months.
@FreePietje @resist1984 as other people have noted they seem irrationally in a rush for a protocol transition of this magnitude—reading between the lines i feel there's a CVE announcement coming up
@orionwl @resist1984
That's a good guess: https://tracker.debian.org/news/1236532/accepted-tor-0457-1-source-into-unstable/
Not very smart that you see on the same day this gets added to tracker.d.o/tor:
"[2021-03-16] Accepted tor 0.3.5.14-1 (source) into stable->embargoed, stable"
You can lift that embargo already ...
https://onion.torproject.org/ only lists v2 services, so it looks like tor project themselves need to hurry up before they pull the plug from their own onion services.
What a joke.
@resist1984 was even more correct then I already admitted in the above linked thread.
Apologies for being so wrong and thanks for informing me :)