hidden service with jabber and ssl

andrew at torproject.org andrew at torproject.org
Thu Mar 4 05:05:53 UTC 2010


On Wed, Mar 03, 2010 at 06:03:40PM +0100, moris at oleco.net wrote 0.6K bytes in 19 lines about:
: i re that it is not secure to use a hidden service 
: with ssl.

https://wiki.torproject.org/noreply/TheOnionRouter/TorFAQ#HttpsHiddenService

: So now i have a jabber Server as a hidden service, and i acan use it
: with ssl on port 5223.
: The questions is now, is it secure or dangerous to use ssl with jabber?

If done correctly, users should be confused why the ssl cert doesn't
match.  However, with xmpp, it may not matter. The best answer I have
now is to try it.

-- 
Andrew Lewman
The Tor Project
pgp 0x31B0974B

Website: https://www.torproject.org/
Blog: https://blog.torproject.org/
Identi.ca: torproject
***********************************************************************
To unsubscribe, send an e-mail to majordomo at torproject.org with
unsubscribe or-talk    in the body. http://archives.seul.org/or/talk/



More information about the tor-talk mailing list