Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

AFAIR there is nothing in TOR that prevents races between two servers trying to get a specific .onion address. So my understanding is, that a collision ( or a broken RSA private key) would put the HSDir into a inconsistent state. And in this case, some people would get the real server and some people would get the impersonated server. ( Additionally TOR hopefully warns if the public key of a hidden server suddenly changes.)


Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: