[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: Talks of hidden services and DNS


This definitely sounds like it will work, and I cannot see it really
taking any extra or special coding.  I think it would work "out of the
box".  The DNS would work both in and out of Tor.  It would be running
outside of Tor, so users not using Tor would get back the CNAME
pointing to 1234abcd.onion and realize that they need Tor to use
.hidden. domains (or .hidden.int.).  It really seems to me like it
should all work well and integrate smoothly into the current system.
Then again, I am very new to Tor, so I could be overseeing something.

I do not see any major security holes that this would bring up.  It
seems to me like it would be the same as accessing google.com through
Tor -- the DNS is looked up through Tor and so it would not be
overridden by a malicious ISP or country.


On 3/11/07, Michael_google gmail_Gersten <keybounce@xxxxxxxxx> wrote:
Cnames to convert something like .hidden to .onion is a decent idea.
If nothing else, when people start clicking on links, and getting
"unresolvable"/"No such host", that might give more exposure to tor to
other people.

We could set up a DNS system entirely within Tor. Just have cnames
from host.hidden.onion to somelongkey.onion, and it is never seen by
the rest of the DNS world. The mappings would be registered with the
directory servers, who would track known, registered mappings from
host.hidden.onion to key.onion, and key.onion's would be registered as
they currently are.

We could even do a combo. Get a special TLD now, or add to an existing
special, like .int. (approval time? About a week). Start putting in
names, registrar being the Tor central directory servers. In about 3
months time, when the code is written and tested, move to Tor served

Kasimir Gabert