Replying to Avatar Mike Dilger ☑️

Q: Can browser apps access tor onion sites? Such sites could not have a valid certificate, right? So I'm guessing they cannot.

So then tor usage is limited to having the client tunnel everything through tor and out through some exit node to a regular website with a valid cert.
Avatar
tdub 6mo ago

You sent me down a rabbit hole, but onion sites don’t need a CA

https://onionservices.torproject.org/research/proposals/usability/certificates/

Reply to this note

Please Login to reply.

Discussion

Avatar
Mike Dilger ☑️ 6mo ago

That is interesting and detailed information.

Web apps running in Chrome or Firefox or Safari wont work with any of those solutions though AFAICT. Clients would have to run on the Tor browser to access .onion relays. Which is sensible anyways (using a tor proxy w/o the tor browser is risky).