3 ms·
Even if you made this a one click service the trailing characters are going to be a killer. Companies care a lot about their brand. And it would require a total
by jgrahamc 9y ago
Even if you made this a one click service the trailing characters are going to be a killer. Companies care a lot about their brand. And it would require a total mindset change for people to verify that they are going to superkuhbitj6tul.onion and not superkuhbit6g4tfr4.onion by verifying the cert that was offered up by the destination site.
- superkuh 9y ago>and not superkuhbit6g4tfr4.onion You mean superkuhbit6g4tf.onion. Although longer Tor based address hashes are coming soon for better security (https://blog.torproject.org/tors-fall-harvest-next-generation-onion-services https://blog.torproject.org/tors-fall-harvest-next-generatio...) so the trailing length of random chars will be even longer. Kind of mitigates my objection. Still, Tor hidden services come with DoS/DDoS protection built in as well. Something Cloudflare and it's centralized service doesn't like to acknowledge.
- jgrahamc 9y ago> Something Cloudflare and it's centralized service doesn't like to acknowledge. Citation needed.
- superkuh 9y agoCloudflare's business is providing DoS mitigation. Cloudflare blocks Tor users by default. Tor provides DoS protection for free. It's no citation but it's certainly reason to believe.
- jgrahamc 9y ago> Cloudflare blocks Tor users by default Incorrect. We do not block Tor users by default and we massively changed our handling of Tor a very long time ago.
- superkuh 9y agoThat's great news. I looked it up and it seems like it's almost been 2 years; not a very long time. I understand defaulting to re-captcha is a compromise and no better option exists for Cloudflare but you'll have to excuse me for not noticing the difference when I encounter "Your network is sending out automated queries" so often it's effectively a block.