Sat. Jan 18th, 2020

ZeroNet 0.5.7 release – Decentralized websites using Bitcoin crypto and BitTorrent network

2 min read

Decentralized websites using Bitcoin crypto and the BitTorrent network –


  • We believe in open, free, and uncensored network and communication.
  • No single point of failure: Site remains online so long as at least 1 peer is serving it.
  • No hosting costs: Sites are served by visitors.
  • Impossible to shut down: It’s nowhere because it’s everywhere.
  • Fast and works offline: You can access the site even if Internet is unavailable.


  • Real-time updated sites
  • Namecoin .bit domains support
  • Easy to setup: unpack & run
  • Clone websites in one click
  • Password-less BIP32 based authorization: Your account is protected by the same cryptography as your Bitcoin wallet
  • Built-in SQL server with P2P data synchronization: Allows easier site development and faster page load times
  • Anonymity: Full Tor network support with .onion hidden services instead of IPv4 addresses
  • TLS encrypted connections
  • Automatic uPnP port opening
  • Plugin for multiuser (openproxy) support
  • Works with any browser/OS

Change log v0.5.7


  • New plugin: CORS to request read permission to other site’s content
  • New API command: userSetSettings/userGetSettings to store site’s settings in users.json
  • Avoid file download if the file size does not match with the requested one
  • JavaScript and wrapper less file access using /raw/ prefix (Example)
  • –silent command line option to disable logging to stdout


  • Better error reporting on sign/verification errors
  • More test for sign and verification process
  • Update to OpenSSL v1.0.2l
  • Limit compressed files to 6MB to avoid zip/tar.gz bomb
  • Allow space, [], () characters in filenames
  • Disable cross-site resource loading to improve privacy. [Reported by Beardog108]
  • Download directly accessed Pdf/Svg/Swf files instead of displaying them to avoid wrapper escape using in JS in SVG file. [Reported by Beardog108]
  • Disallow potentially unsafe regular expressions to avoid ReDoS [Reported by MuxZeroNet]


  • Detecting data directory when running Windows distribution exe [Reported by Plasmmer]
  • OpenSSL loading under Android 6+
  • Error on exiting when no connection server started