3 ms·
If certificate authorities are a concern, then why do some onion services use https?
by surround 6y ago
If certificate authorities are a concern, then why do some onion services use https?
- danielheath 6y agoIf I had to guess, it’d be because TOR users are not a solid block with identical opinions.
- zaarn 6y agoTor public keys don't prove identity (ie, that is cloudflare.com) while such a certificate over, for example, Alt-Svc headers does. Pure .onion certs exist as well and give extra reinsurance that you're on the correct website.