> If they can do that, what's to stop somebody else coming along and brute forcing a key for the same hostname. IIRC it's 80bit truncated SHA-1, so it's not e

> If they can do that, what's to stop somebody else coming along and brute forcing a key for the same hostname. IIRC it's 80bit truncated SHA-1, so it's not even close to feasible unless there's a substantial preimage attack against the function (and none are known). It's clearly feasible to find something close enough to the human eye for a phishing/spoofing attack, but that's hardly a problem exclusive to Tor.