Re: [tor-dev] HTTPS Everywhere harmful

To be clear, Tim is talking about "HTTPS Everywhere" in general, not the browser extension! On 4/24/15 8:05 PM, Mike Perry wrote: Maciej Soltysiak: http://www.w3.org/DesignIssues/Security-NotTheS.html The problem with his argument is that the web (and any protocol, really) needs a way to dem

Re: [tor-dev] HTTPS Everywhere harmful

Maciej Soltysiak: > http://www.w3.org/DesignIssues/Security-NotTheS.html The problem with his argument is that the web (and any protocol, really) needs a way to demand a hard guarantee that a request must proceed over a secure transport layer. If that layer is not available, the request must fail.

[tor-dev] HTTPS Everywhere harmful

http://www.w3.org/DesignIssues/Security-NotTheS.html Maciej ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev

Re: [tor-dev] Draft of proposal "Direct Onion Services: Fast-but-not-hidden services"

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 I like the term "onion service" to refer to a service that requires the use of Tor to access. For onion services whose operators do not want their identities discovered, I suggest renaming "hidden service" to "anonymous onion service". For onion se

[tor-dev] onionoo: increasing first_seen granularity + providing document fingerprints

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi, timestamps are useful to link relays, unfortunately onionoo only says in which consensus the relay was first seen (granularity: 1hour) but does not include the timestamp of the first seen descriptor that ended up in the consensus (published line

Re: [tor-dev] onionoo details document deterministic output

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 22/04/15 20:40, nusenu wrote: > if I ask two onionoo instances running the same version (as given > in the header of the document) for the same details document, to > what extend should they match if relays_published matches, sorting > is been taken

[tor-dev] Impending Facebook Onion-Site Certificate Changes

Hello All! Details: https://www.facebook.com/facebookcorewwwi/posts/703469239759799 Summary: new EV-style SSL certificate rolls out to facebookcorewwwi.onion next week. - alec — Alec Muffett Security Infrastructure Facebook