Re: [tor-dev] Of CA-signed certs and .onion URIs

2014-11-18 Thread George Kadianakis
Tom Ritter t...@ritter.vg writes: There's been a spirited debate on irc, so I thought I would try and capture my thoughts in long form. I think it's important to look at the long-term goals rather than how to get there, so that's where I'm going to start, and then at each item maybe talk a

Re: [tor-dev] Help regarding Development

2014-11-18 Thread rl1987
1. Read doc/HACKING. 2. Browse Easy tickets page [1] and see if you can solve any of them. [1]

Re: [tor-dev] Of CA-signed certs and .onion URIs

2014-11-18 Thread Matthew Finkel
On Mon, Nov 17, 2014 at 05:48:26PM -0500, grarpamp wrote: On Fri, Nov 14, 2014 at 12:08 PM, Tom Ritter t...@ritter.vg wrote: a) Eliminate self-signed certificate errors when browsing https:// on an onion site No, please don't. Browsers throw cert errors for good reasons. If you don't want

Re: [tor-dev] Of CA-signed certs and .onion URIs

2014-11-18 Thread Matthew Finkel
On Tue, Nov 18, 2014 at 05:55:29PM +, George Kadianakis wrote: Tom Ritter t...@ritter.vg writes: There's been a spirited debate on irc, so I thought I would try and capture my thoughts in long form. I think it's important to look at the long-term goals rather than how to get there, so

[tor-dev] Pluggable transports meeting tomorrow (16:00UTC Wednesday 19th of November 2014)

2014-11-18 Thread Yawning Angel
Hello! just wanted to remind you that the regular biweekly pluggable transports meeting is going to occur tomorrow at 16:00 UTC. Place is the #tor-dev IRC channel in the OFTC network. Thanks for your attention! -- Yawning Angel pgp17oIBtS3qf.pgp Description: OpenPGP digital signature

Re: [tor-dev] Of CA-signed certs and .onion URIs

2014-11-18 Thread grarpamp
On Tue, Nov 18, 2014 at 12:55 PM, George Kadianakis desnac...@riseup.net wrote: plans for any Tor modifications we want to do (for example, trusting self-signed certs signed by the HS identity key seem like a generally good idea). If the HS pubkey and the onion CN were both in the cert, and

Re: [tor-dev] Of CA-signed certs and .onion URIs

2014-11-18 Thread Tom Ritter
On 18 November 2014 21:53, grarpamp grarp...@gmail.com wrote: On Tue, Nov 18, 2014 at 12:55 PM, George Kadianakis desnac...@riseup.net wrote: plans for any Tor modifications we want to do (for example, trusting self-signed certs signed by the HS identity key seem like a generally good idea).