[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #6098 [Tor Check]: Add a hidden service to check.torproject.org



#6098: Add a hidden service to check.torproject.org
-------------------------+--------------------------------------------------
 Reporter:  proper       |          Owner:     
     Type:  enhancement  |         Status:  new
 Priority:  normal       |      Milestone:     
Component:  Tor Check    |        Version:     
 Keywords:               |         Parent:     
   Points:               |   Actualpoints:     
-------------------------+--------------------------------------------------

Comment(by proper):

 Replying to [comment:3 phobos]:
 > We would likely have to change the tordnsel and check codebases to look
 for connections from localhost or via the hidden service.  The real plan
 is to get rid of both and figure out how to get the client to verify
 itself without hitting a single service somewhere on the Internet.

 Which ticket is that?

 Replying to [comment:4 phobos]:
 > Replying to [comment:2 arma]:
 > > To address your CA concern, we could pin the CA for
 check.torproject.org in TBB.
 >
 > The cert itself is already pinned in Chrome and Firefox.

 Mike said there are not pinned in Firefox.

 And they are not pinned in Tor Browser.

 https://trac.torproject.org/projects/tor/ticket/3555

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/6098#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs