3 ms·
While that would let you 'impersonate' a hidden service, you would have to hope the actual hidden service goes down because otherwise the HSDir servers will poi
by IceyEC 13y ago
While that would let you 'impersonate' a hidden service, you would have to hope the actual hidden service goes down because otherwise the HSDir servers will point requests to the proper host and requests will be encrypted to their key
- makomk 13y agoIf I recall correctly, it's basically a case of last server to update the dir servers wins, so impersonating hidden services shouldn't be too hard unless the actual service goes down and is restarted.
- yk 13y agoAFAIR there is nothing in TOR that prevents races between two servers trying to get a specific .onion address. So my understanding is, that a collision ( or a broken RSA private key) would put the HSDir into a inconsistent state. And in this case, some people would get the real server and some people would get the impersonated server. ( Additionally TOR hopefully warns if the public key of a hidden server suddenly changes.)