[tbb-bugs] #21321 [Applications/Tor Browser]: Convince Mozilla; .onion HTTP is SECURE.

Tor Bug Tracker & Wiki blackhole at torproject.org
Tue Feb 14 21:28:07 UTC 2017


#21321: Convince Mozilla; .onion HTTP is SECURE.
---------------------------------------------+--------------------------
 Reporter:  cypherpunks                      |          Owner:  tbb-team
     Type:  task                             |         Status:  new
 Priority:  Medium                           |      Milestone:
Component:  Applications/Tor Browser         |        Version:
 Severity:  Normal                           |     Resolution:
 Keywords:  ff52-esr, tbb-usability-website  |  Actual Points:
Parent ID:                                   |         Points:
 Reviewer:                                   |        Sponsor:
---------------------------------------------+--------------------------

Comment (by cypherpunks):

 It is not. https over .onion is secure. .onion is insecure and should be
 used only for decentralized DNS (insecure, the RSA-1024 is broken) and
 website position obfuscation.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/21321#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list