1. If you want to improve page load speed you need to buy a HTTPS certificate so you are not limited to HTTP/1.1. Multiplexing in HTTP/2 is important for getting sites to load fast.
2. You can set the HiddenServiceExportCircuitID configuration to pass the circuit id to your web server for telemetry or anti abuse purposes. Otherwise your logs will say that all users are coming from the same IP.
Fascinating, onion services are always encrypted by the tor network but still tunnel "cleartext" http inside that, and there are no CAs that issue free of charge certificates for .onion domains, and therefore there's no free of charge way to get http/2 on onion services without self signing.
Which raises the question: why not just trust self-signed certificates on onion services? From my brief look it seems to be because the Tor project views the primary purposes of HTTPS on onion services to be other things rather than just http/2 support: http/2 isn't even mentioned on their page about https for onion services (<a href="https://community.torproject.org/onion-services/advanced/https/" rel="nofollow">https://community.torproject.org/onion-services/advanced/htt...). Unfortunate.
charcircuit · · focus · HN ↗
1. If you want to improve page load speed you need to buy a HTTPS certificate so you are not limited to HTTP/1.1. Multiplexing in HTTP/2 is important for getting sites to load fast.
2. You can set the HiddenServiceExportCircuitID configuration to pass the circuit id to your web server for telemetry or anti abuse purposes. Otherwise your logs will say that all users are coming from the same IP.
<a href="https://blog.cloudflare.com/cloudflare-onion-service" rel="nofollow">https://blog.cloudflare.com/cloudflare-onion-service
markasoftware · · focus · HN ↗
Which raises the question: why not just trust self-signed certificates on onion services? From my brief look it seems to be because the Tor project views the primary purposes of HTTPS on onion services to be other things rather than just http/2 support: http/2 isn't even mentioned on their page about https for onion services (<a href="https://community.torproject.org/onion-services/advanced/https/" rel="nofollow">https://community.torproject.org/onion-services/advanced/htt...). Unfortunate.
someonebaggy · · focus · HN ↗
charcircuit · · focus · HN ↗