Tor would not be validating the nature or security of the hosted site, rather the JSON would be confirming attributes of the visitor. I cannot imagine many scenarios where a malicious party stands to benefit from forging these credentials -- or for that matter a manner where they could not fake a confirmation themselves without using the API.<br>
<br><div class="gmail_quote">On Sun, Nov 6, 2011 at 9:13 PM, Andrew Lewman <span dir="ltr"><<a href="mailto:andrew@torproject.org">andrew@torproject.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div class="im">On Sunday, November 06, 2011 11:00:08 Fabio Pietrosanti (naif) wrote:<br>
> Let's support that AccessNow <a href="https://www.accessnow.org/" target="_blank">https://www.accessnow.org/</a> would like to<br>
> implement the privacybadge web widget, they have several options:<br>
<br>
</div>A word of caution about privacy badges, learning the history of TRUSTe is<br>
relevant, <a href="https://secure.wikimedia.org/wikipedia/en/wiki/TRUSTe#History" target="_blank">https://secure.wikimedia.org/wikipedia/en/wiki/TRUSTe#History</a>.<br>
<br>
Research shows that sites with the TRUSTe seal are the least likely to honor<br>
what you think of as privacy, <a href="http://www.benedelman.org/news/092506-1.html" target="_blank">http://www.benedelman.org/news/092506-1.html</a>.<br>
<font color="#888888"><br>
--<br>
Andrew<br>
pgp 0x74ED336B<br>
</font><div><div></div><div class="h5">_______________________________________________<br>
tor-talk mailing list<br>
<a href="mailto:tor-talk@lists.torproject.org">tor-talk@lists.torproject.org</a><br>
<a href="https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk" target="_blank">https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk</a><br>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br><b>Collin David Anderson</b><div><a href="http://averysmallbird.com" target="_blank">averysmallbird.com</a> | @cda | Washington, D.C.</div><br>