News for hackers. Stuff that matters.
Re:A New Tor Search Engine by baby on Friday August 04, 2017 @10:05AM (#14928728)
> I think you are assuming a lot about what people here thinks.

Or you are

> Well, no > It doesn't really work like that

Don't be pedantic. You got my point.

> Now you are accusing this service of trying to MITM its users based on nothing

I said probably.

Re:A New Tor Search Engine by snakeanus on Friday August 04, 2017 @10:14AM (#14928791)
It's not about being pedantic, it's about not being plainly incorrect.
Re:A New Tor Search Engine by baby on Friday August 04, 2017 @10:43AM (#14929002)
Everybody knows the security of TOR doesn't only come from the URL you type on your keyboard. This is called exaggeration not being incorrect.
Re:A New Tor Search Engine by snakeanus on Friday August 04, 2017 @11:35AM (#14929462)
The claim that Tor hidden services use TLS in order to encrypt their communication seems incorrect to me.
Re:A New Tor Search Engine by baby on Friday August 04, 2017 @06:30PM (#14932900)
I actually imagined they always would since you would use the url to verify the pubkey. Why would they build hidden services without it?
Re:A New Tor Search Engine by p4bl0 on Friday August 04, 2017 @08:52PM (#14933604)
Public-key cryptography is used by Tor hidden services but it's not based on TLS/SSL certificates. There are a lot of detailed explanations of how this works on the web, but if you just want a quick overview I recently wrote about in the introduction of an article for 2600 (summer 2017 issue https://store.2600.com/collections/2010-2015/products/summer...). You can find a copy of my article here: https://pablo.rauzy.name/outreach/2600/how-to-run-a-tor-hidd...