[tbb-bugs] #21321 [Applications/Tor Browser]: Convince Mozilla; .onion HTTP is SECURE.
Tor Bug Tracker & Wiki
blackhole at torproject.org
Tue Feb 14 21:28:07 UTC 2017
#21321: Convince Mozilla; .onion HTTP is SECURE.
---------------------------------------------+--------------------------
Reporter: cypherpunks | Owner: tbb-team
Type: task | Status: new
Priority: Medium | Milestone:
Component: Applications/Tor Browser | Version:
Severity: Normal | Resolution:
Keywords: ff52-esr, tbb-usability-website | Actual Points:
Parent ID: | Points:
Reviewer: | Sponsor:
---------------------------------------------+--------------------------
Comment (by cypherpunks):
It is not. https over .onion is secure. .onion is insecure and should be
used only for decentralized DNS (insecure, the RSA-1024 is broken) and
website position obfuscation.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/21321#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tbb-bugs
mailing list