<html>
<head>
<meta content="text/html; charset=ISO-8859-15"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
-----BEGIN PGP SIGNED MESSAGE-----<br>
Hash: SHA512<br>
<br>
Tyrano,<br>
<br>
Thank you for your feedback. However, I'm not sure I fully
understand your questions.<br>
<br>
Under my proposal, at least at this moment, if a domain ends with
.tor (regex match) it is the human-name for a Tor hidden service and
requires translation. The .tor domain, like .onion and the obsolete
.exit, cannot be reached from outside Tor and will case an immediate
DNS failure on the clearnet DNS system. As far as I know, the .tor
domain is not in use in the clearnet, so I think I am safe in using
it. If the .tor cannot be found, I don't like the idea of retrying
it on the clearnet through the Tor exit, that just leaks the lookup
and your objective too many times. If you are looking up X.tor, it's
quite likely that you're interested in browsing X.tor, and that is a
small compromise of your privacy. Leaking the .tor lookup on
clearnet DNS servers also introduces a small possibility for timing
attacks.<br>
<br>
On a different note, I'm sorry about the malformatting and the bad
signature on my opening post. I'm not sure what happened there, but
nothing other than formatting was amiss.<br>
<br>
- --<br>
Jesse V.<br>
/CS, Network Security/<br>
/Utah State University/<br>
<br>
<br>
On 08/01/2014 03:39 AM, Tyrano Sauro <a class="moz-txt-link-rfc2396E" href="mailto:tyranosu@yahoo.co.nz"><tyranosu@yahoo.co.nz></a>
wrote:<br>
<span style="white-space: pre;">> Can we know a DNS for the
normal HTTP of a hidden service?<br>
> If the onion hidden name cannot reach from outside of Tor
then maybe use that?</span><br>
<br>
-----BEGIN PGP SIGNATURE-----<br>
Version: GnuPG v1.4.14 (GNU/Linux)<br>
Comment: Using GnuPG with Thunderbird - <a class="moz-txt-link-freetext" href="http://www.enigmail.net/">http://www.enigmail.net/</a><br>
<br>
iQF8BAEBCgBmBQJT277DXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w<br>
ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQxMjgyMjhENjEyODQ1OTU1NzBCMjgwRkFB<br>
RDk3MzY0RkMyMEJFQzgwAAoJEK2XNk/CC+yAJu4H/R/aYKDAIdnJFh4UXQpt3kBm<br>
60mevMh5E12a2a/SnW8R09jkzjKCoDhf2wQjiXjCnry/PLOBHoo3v/YZhe/jZxj/<br>
xAyaPy1pmMaYHmGKlulV385nG80tBFrVXXCkk/9bOe6cU97izwDUyHQ/vrryPs60<br>
WoVglAm3Zus9badQxfYOVl6hrn/vqp3IhZ9J8UEjzqPiRUM5p5Uv43zlGUmjNn6u<br>
JU+YFNj5NegAS884EFusz92jzgOeMK9GAcT4x3sYfHsy5StvZE7OZdIwz2gZJl6m<br>
zGOX7B17BIt8NkAcLAQgSLaVoKuYo2ajgW/i2vcLcg3WXtjCJ7znQUd27U42VUc=<br>
=zWU3<br>
-----END PGP SIGNATURE-----<br>
<br>
</body>
</html>