Clearnet onion gateways

Gateways solve a real problem badly, in a way that hands a stranger everything the architecture was built to protect.

How they work

A gateway is a website that appends a suffix to an onion address so you can open it in an ordinary browser. What happens underneath is that the gateway operator runs the Tor connection themselves, fetches the page, and forwards it to you over the clearnet.

That means every request passes through their machine in a form they can read. Not encrypted end to end to the destination, not opaque, readable. Whatever you type on a page loaded through a gateway is typed into the gateway, and it forwards it onward. Usernames, passwords, two factor responses, messages, addresses. All of it.

What you also give up

• Anonymity from the destination. Your connection reaches the site from the gateway, so the protection Tor provides is protecting the gateway, not you.
• Anonymity from your network. You visited a clearnet domain, which is visible to your provider in a way an onion connection is not.
• Any ability to verify. Signature checking assumes the page reached you unmodified. Through a gateway it reached you via a party who could change anything, so the check verifies whatever they chose to show you.
• Knowing where you actually went. The gateway resolves the address. You are trusting it to have gone where you asked.

Why they exist

Because installing Tor Browser is an obstacle and people route around obstacles. Some gateways are run with good intentions by people who wanted to make something accessible and have not thought the position through. Others exist precisely because the position is so good, and there is no way to tell which is which from outside.

The distinction matters less than it seems. An honest gateway operator is still an operator who can be compromised, compelled, or replaced, and a benign one becomes a hostile one the moment any of those happens, retroactively affecting everyone who used it.

The version worth naming

Gateway domains that closely resemble the platform they proxy, marketed as an easy way in. These are usually not gateways at all. They are login clones that skip the proxying entirely, because if the goal is collecting credentials there is no reason to build the hard part.

The tell is that they want you to log in, and a real gateway has no interest in whether you do. Anything on the clearnet asking for market credentials is collecting them, without exception, and there is no arrangement under which that is fine.

The alternative

Tor Browser, from the project directly, with the signature on the installer checked. It takes a few minutes once and removes the entire category of problem described above. Storing your addresses properly handles the convenience question that sent people to gateways in the first place.