Skip the 56-char .onion. Use yourname.stacc.
Tor v3 .onion addresses are 56 characters of base32. Nobody types those. AllDomains gives you a real name on Solana (.stacc is one TLD; there are ~250 others), and the ouija-onion-resolver browser extension turns that name into the matching .onion at the URL-bar level.
How the resolution chain works
- 1. You register
yourname.staccon AllDomains · .stacc. That mints an NFT on Solana whose owner field controls what the name resolves to. Set the owner to your publish wallet — the same key whose .onion you publish from. - 2. Install ouija-onion-resolver in Brave / Chrome / Firefox (also run Tor properly if you want full .onion semantics).
- 3. Anyone types
yourname.staccin the URL bar. The extension intercepts before DNS, looks up the AllDomains owner on Solana, derives the matching .onion (same identity-collapse math this site uses), and redirects the tab. - 4. In Tor Browser or a Tor-enabled session the redirect hits a real hidden service (yours, if you self-host). In Brave private window with the .onion fallback, or with a tor2web gateway, the same .onion still resolves clearnet-ish.
- 5. Convenience-hosted via ouija publish, the redirect target is the same .onion address — but it currently lands at our clearnet mirror at
/sites/<onion>unless you've also set up the real hidden service.
What's verified end-to-end
- Ownership. Only the Solana wallet that owns the AllDomains NFT can change what the name resolves to. The on-chain owner is the source of truth.
- Identity collapse. The extension derives the .onion from the wallet pubkey — no separate lookup table, no off-chain pointer to be poisoned. If you transfer the AllDomains NFT to a different wallet, the name now resolves to that wallet's derived .onion. The name follows the key.
- No DNS, no CA. The whole chain is wallet → on-chain NFT → derived Tor pubkey → hidden service. No DNS step that an ISP can tamper with, no certificate authority that could be coerced into issuing a bogus cert.
Other TLDs that resolve the same way
The extension fetches the active TLD list from the on-chain TldHouse program every 24 hours. .stacc is one option; there are roughly 250 registered TLDs (.sol, .bonk, .glow, .pulse, .nft, …). Any of them work — pick whichever you can mint a name in.
Browser support caveats
- The extension is the resolver. Without it,
.staccis just a string the browser tries to send to a DNS server, which fails. - In Tor Browser, install the extension via
about:debugging→ "Load Temporary Add-on" (stock Tor Browser refuses unsigned add-ons in the normal install path). - Mobile browsers don't support web extensions the same way; .stacc resolution on iOS/Android needs an ouija-aware browser, which doesn't exist yet.