News for hackers. Stuff that matters.

A comment on The New York Times Is Now Available as a Tor Onion Service. Parent comment

Re:The New York Times Is Now Available as a Tor Onion Service by forapurpose on Friday October 27, 2017 @01:54PM (#15570683)
> you now know that the website you want is actually who they say they are?

That's the idea. Of course, validation, while more thorough than for standard certs, still is not that reliable. My strong impression is that it could be fooled by anyone sufficiently motivated.

[ Parent | on HN ]
Re:The New York Times Is Now Available as a Tor Onion Service by peterwwillis on Friday October 27, 2017 @03:12PM (#15571315)
Not only that - in practice it's kind of meaningless, because if you were served a non-EV cert, you wouldn't notice. And there's usually other domains or subdomains that don't use the EV cert. It's mostly just a kind of token gesture by a business to claim they're more secure.
[ Parent | on HN ]
Re:The New York Times Is Now Available as a Tor Onion Service by easyroot on Friday October 27, 2017 @08:28PM (#15573342)
EV is part of a narrative. Which has some value, even if weak.
[ Parent | on HN ]