[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #23843 [Internal Services]: Use https on all internal .onion services.

#23843: Use https on all internal .onion services.
-------------------------------+-------------------------
 Reporter:  cypherpunks        |          Owner:  (none)
     Type:  defect             |         Status:  closed
 Priority:  Medium             |      Milestone:
Component:  Internal Services  |        Version:
 Severity:  Normal             |     Resolution:  invalid
 Keywords:                     |  Actual Points:
Parent ID:                     |         Points:
 Reviewer:                     |        Sponsor:
-------------------------------+-------------------------
Changes (by cypherpunks):

 * status:  new => closed
 * resolution:   => invalid


Comment:

 > A crypto axiom says "Don't invent own cryptography".
 > You have violated it inventing HSs.

 That's not true, they know use SHA3/ed25519/curve25519 for v3 OSs which
 isn't their "own invented crypto" by any stretch of imagination.

 Also https for OSs only shows you that you're talking to the right OS and
 not that it gets another layer of encryption.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/23843#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs