[tor-talk] torproject.us?

Roman Mamedov rm at romanrm.net
Fri Aug 9 10:23:58 UTC 2013


Hello,

What is "www.torproject.us", and is it a scam clone website serving trojaned
copies of Tor and TBB?

I always thought the Tor website is only www.torproject.org, but today I see a
link to the .us site, with no explanation of what's the relation to .org and
why on earth something like that would exist. Both sites use different web
hosts, different SSL certificates, but serve seemingly exactly the same content
(or not?...). Seems fishy to me.

If this .us domain is indeed controlled by the Tor project, the ONLY correct
decision is to set up "HTTP 302" redirect to the .org website, NOT validate
the notion that there can be multiple official sources for Tor -- or next time
we will see clones at "torproject.tk", "torproject.su" or "torproject.biz" and
those while also posing as the official ones may be not so benign in nature.

-- 
With respect,
Roman
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20130809/94d10a5c/attachment.sig>


More information about the tor-talk mailing list