Re:How to distrust a CA without any certificate errors
by dooglius on Friday March 07, 2025 @01:14PM
(#43292577)
You also have to trust where you get a non-onion link from?
[ Parent
| on HN ]
Re:How to distrust a CA without any certificate errors
by lxgr on Friday March 07, 2025 @01:27PM
(#43292735)
Yes, but non-Onion links are slightly more memorable.
That's not to say that domain typo attacks aren't a real problem, but memorizing an Onion link is entirely impossible. Domains exploiting typos or using registered/trademarked business names can also often be seized through legal means.
Re:How to distrust a CA without any certificate errors
by nullpoint420 on Friday March 07, 2025 @05:34PM
(#43295538)
Can we not map regular domain names to onion links? DNS except instead of regular DNS mappings of URLS -> IP Addresses it's URLS -> Onion URLs?
Or maybe we return to using bookmarks? Not sure exactly.