News for hackers. Stuff that matters.
Re:Tor Users Might Soon Have a Way to Avoid Those Annoying C... by yorwba on Sunday October 02, 2016 @03:45AM (#12621433)
If the tokens are never sent, only their blinded versions, it is pretty much guaranteed that the signature you get back was made without looking at the actual token.
Re:Tor Users Might Soon Have a Way to Avoid Those Annoying C... by mirimir on Sunday October 02, 2016 @03:48AM (#12621439)
I get that. What I wonder is who would nontechnical users need to trust about that? CloudFlare? The Tor Project?
Re:Tor Users Might Soon Have a Way to Avoid Those Annoying C... by Ar-Curunir on Sunday October 02, 2016 @04:35AM (#12621526)
I'm not sure, but it can be done with just CloudFlare changes; if the plugin is open source it should be fine. Maybe if Tor Browser integrates the plugin it should be fine too.
Re:Tor Users Might Soon Have a Way to Avoid Those Annoying C... by mirimir on Sunday October 02, 2016 @06:37AM (#12621758)
Optimal would be only needing to trust the Tor Project.