[tor-talk] How secure is check.torproject.org?

[Ed Fletcher]

On 21/11/2013 5:08 AM, Katya Titov wrote:
> Roger Dingledine:
>> But TBB in the background will still fetch
>> https://check.torproject.org/RecommendedTBBVersions
>> to decide if you need to upgrade without telling anybody your version.

>> So yes, the answer is that pretty soon the check website won't be the
>> bottleneck that it currently is.
>
> Just out of interest, why doesn't the current TBB load a .onion address
> to check that Tor is working correctly? Or two tabs, one loading the
> current check site and one loading a hidden service version?
>
> The HS version would demonstrate beyond a doubt that you're
> communicating over Tor.
>
This is something that I have also wondered about.  Why go outside of 
the Tor network to check that you're using Tor?  Access to any hidden 
service would be proof positive that you are connected.

Ed
-- 
Ed Fletcher

"If you are not paying for it, you're not the
customer; you're the product being sold."
-- Andrew Lewis, August 26, 2010