5 ms·
Might be useful to serve that page over https so the .onion address it contains can't be changed by a man in the middle.
by thruflo 13y ago
Might be useful to serve that page over https so the .onion address it contains can't be changed by a man in the middle.
- nijk 13y agoAs it is now, unsecured, it is a complete honeypot to catch senders.
- daviddoran 13y agoAgree. I think they should be using HTTPs, HSTS etc for this page.
- bjacobel 13y agoGithub Pages, to my knowledge, doesn't support HTTPS. They'd have to move it.
- deleted 13y ago[deleted]
- deleted 13y ago[deleted]
- dangrossman 13y agoThat doesn't help if you're talking securely to the wrong address.
- dbpatterson 13y agoThe parent was saying that the onion address could be changed. Did you even read what they wrote? [edit] because the original poster deleted their post, it said something like: that's pointless, because tor ensures that communication is secure [/edit]