[tor-talk] Can someone please help me understand section 1.10 of the rendezvous spec

[Yaron Goland]

I'm trying to understand section 1.10 of https://gitweb.torproject.org/torspec.git?a=blob_plain;hb=HEAD;f=rend-spec.txt


It seems to say that Alice and Bob directly negotiate a shared symmetric key. Is that true? Does it mean that all communications between Alice and Bob, in the context of a Tor hidden service, are in fact encrypted end to end?


I believe that https://www.torproject.org/docs/hidden-services.html.en confirms this point when it says "The rendezvous point simply relays (end-to-end encrypted) messages from client to service and vice versa."


But this point is really critical for a threat model I'm building so I just want to make sure I've gotten things right. Could anyone confirm?


    Thanks,


            Yaron