[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #13410 [Tor Browser]: Disable self-signed certificate warnings when visiting .onion sites

#13410: Disable self-signed certificate warnings when visiting .onion sites
-----------------------------+----------------------
     Reporter:  tom          |      Owner:  tbb-team
         Type:  defect       |     Status:  new
     Priority:  normal       |  Milestone:
    Component:  Tor Browser  |    Version:
   Resolution:               |   Keywords:
Actual Points:               |  Parent ID:
       Points:               |
-----------------------------+----------------------

Comment (by vynX):

 Yes, I was about to open the same feature enhancement request. The
 addresses of hidden services are a much stronger guarantee of authenticity
 than any damn certificate. It is completely irrelevant which certificate
 the website is offering and in fact it apparently takes special bribing to
 have a valid cert issued for an .onion although there is no reason for
 that. CAs could give out onion certs with zero checks since only the owner
 of the private key can make any use of it.

 Please make use of the technological advantages of Tor. Don't let legacy
 crap impede us from fully enjoying end-to-end TLS (which is relevant when
 your Tor router isn't the same machine as your Tor browser).

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13410#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs