Re: [tor-talk] Not comfortable with the new single-hop system merged into Tor

[Cannon <cannon@xxxxxxxxxxxxxxxxx>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 12/21/2016 04:38 AM, hikki@xxxxxxxxxxxxx wrote:
> I just think that this new single-hop system should have been reserved for a 
> different Tor source/installation, dedicated only to non-anonymous hidden 
> services, not merge it with the regular Tor software. And this for security.
> 
> I once witnessed a software (non-Tor related) that had a special function 
> which was disabled by default, but was accidentally enabled due to a bug 
> that occured during special circumstances, causing big trouble for some. In 
> this case it caused a big money loss for some, but with the Tor software we 
> are talking about the lives and wellbeing of humans.
> 
> How do I know that my hidden service is really running anonymously, and not with just 1-hop, besides just trusting the config defaults?
> 
> Please prove me wrong. I'm just concerned here, and just want some feedback.
> Thanks for understanding!
> 
> -Hikki
> 


Good point.
I believe the new single-hop is a great option for some situation such as if a website does not need to be anonymous but yet would still like to have a .onion address so users can still remain anonymous or take advantage of the higher security of .onion addresses over that of clearnet, and with advantage of less latency over that of a full hidden service.

However you do bring up a good point. This new single-hop system should remain a feature, but should not come as default but should be an "add-on pack" that should have to be downloaded or compiled seperately.

-----BEGIN PGP SIGNATURE-----
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=HZxk
-----END PGP SIGNATURE-----
 

-- 
Cannon
PGP Fingerprint: 2BB5 15CD 66E7 4E28 45DC 6494 A5A2 2879 3F06 E832 
Email: cannon@xxxxxxxxxxxxxxxxx

NOTICE: ALL EMAIL CORRESPONDENCE NOT SIGNED/ENCRYPTED WITH PGP SHOULD BE CONSIDERED POTENTIALLY FORGED, AND NOT PRIVATE.
If this matters to you, use PGP or bitmessage.
-- 
tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk