Re: [tor-dev] Of CA-signed certs and .onion URIs

2014-11-18 Thread Tom Ritter
On 18 November 2014 21:53, grarpamp wrote: > On Tue, Nov 18, 2014 at 12:55 PM, George Kadianakis > wrote: >> plans for any Tor modifications we want to do (for example, trusting >> self-signed certs signed by the HS identity key seem like a generally >> good idea). > > If the HS pubkey and the on

Re: [tor-dev] Of CA-signed certs and .onion URIs

2014-11-18 Thread grarpamp
On Tue, Nov 18, 2014 at 12:55 PM, George Kadianakis wrote: > plans for any Tor modifications we want to do (for example, trusting > self-signed certs signed by the HS identity key seem like a generally > good idea). If the HS pubkey and the onion CN were both in the cert, and signed over by that

[tor-dev] Pluggable transports meeting tomorrow (16:00UTC Wednesday 19th of November 2014)

2014-11-18 Thread Yawning Angel
Hello! just wanted to remind you that the regular biweekly pluggable transports meeting is going to occur tomorrow at 16:00 UTC. Place is the #tor-dev IRC channel in the OFTC network. Thanks for your attention! -- Yawning Angel pgp17oIBtS3qf.pgp Description: OpenPGP digital signature ___

Re: [tor-dev] Of CA-signed certs and .onion URIs

2014-11-18 Thread Matthew Finkel
On Tue, Nov 18, 2014 at 05:55:29PM +, George Kadianakis wrote: > Tom Ritter writes: > > > There's been a spirited debate on irc, so I thought I would try and > > capture my thoughts in long form. I think it's important to look at > > the long-term goals rather than how to get there, so that's

Re: [tor-dev] Of CA-signed certs and .onion URIs

2014-11-18 Thread Matthew Finkel
On Mon, Nov 17, 2014 at 05:48:26PM -0500, grarpamp wrote: > On Fri, Nov 14, 2014 at 12:08 PM, Tom Ritter wrote: > > a) Eliminate self-signed certificate errors when browsing https:// on > > an onion site > > No, please don't. Browsers throw cert errors for good reasons. > If you don't want to dea

Re: [tor-dev] Of CA-signed certs and .onion URIs

2014-11-18 Thread Jeremy Rowley
Thanks George - that is where the discussion is happening. Unfortunately, public participation is really limited in the CAB Forum. However, if you want to help, please reach out to the individuals advocating against the proposal (or submit your suggestions to me) to see if we can get a secure,

Re: [tor-dev] Help regarding Development

2014-11-18 Thread rl1987
1. Read doc/HACKING. 2. Browse "Easy tickets" page [1] and see if you can solve any of them. [1] https://trac.torproject.org/projects/tor/query?status=accepted&status=assigned&status=needs_review&status=new&status=reopened&order=priority&keywords=~easy&col=id&col=summary&col=component&col=status

Re: [tor-dev] Of CA-signed certs and .onion URIs

2014-11-18 Thread George Kadianakis
Tom Ritter writes: > There's been a spirited debate on irc, so I thought I would try and > capture my thoughts in long form. I think it's important to look at > the long-term goals rather than how to get there, so that's where I'm > going to start, and then at each item maybe talk a little bit ab