Re: [tor-dev] Proposal 273: Exit relay pinning for web services

2016-10-05 Thread Roger Dingledine
On Wed, Oct 05, 2016 at 04:09:15PM -0400, Philipp Winter wrote: > Filename: 273-exit-relay-pinning.txt > Title: Exit relay pinning for web services Good topic! I'm glad people are still working on this one. >Web servers support ERP by advertising it in the "Tor-Exit-Pins" HTTP >header. T

Re: [tor-dev] Proposal 273: Exit relay pinning for web services

2016-10-05 Thread Yawning Angel
On Wed, 5 Oct 2016 16:09:15 -0400 Philipp Winter wrote: > The proposal is in draft state. We have several open questions that > we are still wrestling with in Section 2.6. Any feedback is greatly > appreciated. You can track the evolution of our proposal online: >

[tor-dev] Proposal 273: Exit relay pinning for web services

2016-10-05 Thread Philipp Winter
The proposal is in draft state. We have several open questions that we are still wrestling with in Section 2.6. Any feedback is greatly appreciated. You can track the evolution of our proposal online: --- Filename: 273-exit-relay-pinning.txt Tit

Re: [tor-dev] Onioncat and Prop224

2016-10-05 Thread grarpamp
Many wrote, in subthread started by dawuud 5 days ago: > talk: internet of things, security / exploit / nsa, crypto via tor, > everything over tor, exits This subthread does not concern the subject made for curating / supporting / tracking / developing "Onioncat and Prop224" [1]. Please a) end it,

Re: [tor-dev] Onioncat and Prop224

2016-10-05 Thread Tim Kuijsten
Op 05-10-16 om 19:36 schreef Evan d'Entremont: to be more clear, those devices can currently be surveilled passively. If they were encrypted they couldn't be. ic, valid point. I was thinking more of the recent rise in exploited IoT devices[1] and the sad state of IoT security in general. [1]

Re: [tor-dev] Onioncat and Prop224

2016-10-05 Thread Evan d'Entremont
to be more clear, those devices can currently be surveilled passively. If they were encrypted they couldn't be. On Wed, Oct 5, 2016 at 2:31 PM Evan d'Entremont wrote: > > Changing the subject a bit, isn't The Internet of Things > going to lead to a situation where there are even more NSA, GCHQ,

Re: [tor-dev] Onioncat and Prop224

2016-10-05 Thread Evan d'Entremont
> Changing the subject a bit, isn't The Internet of Things going to lead to a situation where there are even more NSA, GCHQ, BND remotely controlled computers with microphones and other sensors all around us They didn't say anything about exploits. I just have several gateways on my desk and none