MoreOnionsPorfavor: Onionize your website and take back the internet

Re:MoreOnionsPorfavor: Onionize your website and take back t... by t0astbread on Wednesday July 08, 2020 @09:32PM (#23776144)

I am not an expert but as far as I understand it's harder to do correlation attacks when you're able to monitor network traffic when communication stays inside the Tor network. Additionally, you're replacing (or extending) CAs with Tor's public key cryptography for authentication and encryption.

Computerphile did an interesting video series on this!

[ Parent | on HN ]

Re:MoreOnionsPorfavor: Onionize your website and take back t... by moonchild on Thursday July 09, 2020 @04:01AM (#23777966)

> replacing (or extending) CAs with Tor's public key cryptography

Which is good because CAs are useless; they're complete overhead. Back when EV certificates meant something, they were marginally useful, but at this point, we might as well just switch to a TXT record that validates domain ownership. (Obviously, that doesn't protect against DNS MITM attacks, but that's a separate issue.)

[ Parent | on HN ]

Re:MoreOnionsPorfavor: Onionize your website and take back t... by t0astbread on Thursday July 09, 2020 @06:34AM (#23778715)

Oh you mean storing some data to cryptographically verify that a particular server is associated with a domain? If I'm not mistaken, that's what .onion addresses are.

I wonder if anyone has tried putting .onion addresses into DNS and have clients treat them like address records...

[ Parent | on HN ]