> Perhaps it would make sense to create a separate URL type for Tor services whose keys are signed by a certificate authority? The onion IS a proof of key. If

> Perhaps it would make sense to create a separate URL type for Tor services whose keys are signed by a certificate authority? The onion IS a proof of key. If you use the whole onion address (which is a hash of the public key) then Tor requires that the hidden service be able to prove they own the private key. It's like a builtin CA. The problem to me is that knowing someone has a key isn't as interesting as knowing that the person is a trusted source. And being anonymous takes some of the responsibility away. It makes more sense to me that someone just use an HTTPS clearnet site and users who want to protect their own IP address can access it from Tor (it works just fine). Protecting the site owners identity and then wanting to prove their identity to stop phishing attempts seems at odds to me.