evilaliv3
commented
9 years ago Current specification discussed with @fpietrosanti is the following:
- the API should permit requests to a /gettor resource
- the resource should provide an output compliant to current Tor API implemented at: https://check.torproject.org/api/ip
- the HTTP response should inject an x-check-tor header returning a simple boolean value depending if the user is detected to be using Tor or not
- the resource should allow CORS as specified in https://developer.mozilla.org/en-US/docs/Web/HTTP/Access_control_CORS
fpietrosanti
The aim of this ticket is to design and and implement a CheckTor API useful for allowing clients to detect if they are using Tor or not, by simply making requests to a Tor2web domain.
This would allow to perfom this check on the same domain of a Tor2web instance without requiring user to perform requests to different domain, or to implement the check on an existing domain of an initiative without leaking any requests to external services.