Delivery¶

How clients reach your site. Every site has at least two delivery endpoints:

Default clearnet — <your-slug>.viaductcdn.com with our wildcard cert
Per-site .onion — published as soon as the site is created; resolves over Tor with no extra setup

Status: skeleton

Full content lands in a follow-up pass.

Custom domains (Pro and Business)¶

Add a CNAME at your DNS provider:

my-domain.example.com  CNAME  <your-slug>.viaductcdn.com

We issue and renew the Let's Encrypt cert automatically.

You generate a mkp224o-mined v3 key locally and upload via signed URL. We never see the private half after upload.

Clearnet: TLS 1.2 + 1.3, modern cipher suites only
.onion: HTTP-only by design (Tor circuit provides confidentiality + integrity at the network layer; layering TLS on top is unnecessary and incompatible with most Tor browser configurations)