3 ms·
DV lets you know that you're connecting to the domain that you're connecting to. You already know that with all onion addresses. EV lets you assure that you a
by dublinben 9y ago
DV lets you know that you're connecting to the domain that you're connecting to. You already know that with all onion addresses.
EV lets you assure that you are connected to the New York Times.
- detaro 9y agoI believe the original post meant "meaningful as form of identity" to human brains, not technical identity.
- komali2 9y agoI'm trying to understand onion/tor better, what about Onion addresses specifically make them I guess invulnerable to man in the middle attacks?
- detaro 9y agoThe public key is encoded in the onion address, so the client can verify the server you connect to has the matching private key. This is part of the tor protocol, so happens always when talking to onion services.
- xorcist 9y agoOnion domains are a form of content addressing based on public key pairs. Normally onion domains aren't that readable as the nytimes one and look more like a bunch of random letters. (All nytimes did was generate many million key pairs until they found one that looked cool.) If you fetch web pages from http://abc123.onion http://abc123.onion you bascially tell tor "connect me to whoever holds the certificate with fingerprint abc123". Any domain validated certificates on top of that is superfluous since you already know which certificate you are talking to. What you don't know is who holds it. This is where organizationally validated certificates can help.