Hacker News new | past | comments | ask | show | jobs | submit login




You pasted a HTTPS address, but the server doesn't answer to HTTPS (it is somewhat redundant when you use onion services anyway). The correct one is http://scihub22266oqcxt.onion/


It's not redundant; if someone sets up a malicious exit node they can view all your traffic, unless it is encrypted e.g. by SSL.

Of course for this kind of site that is not so important, but you shouldn't use any kind of site where you log in or enter sensitive information over Tor without HTTPS.


Traffic to .onion URLs is terminated within the Tor network. It doesn't pass through exit nodes.

HTTPS is actually a bit redundant for .onion URLs, as the hostname is a representation of the host's public key.


It's fully redundant for .onion sites. Traffic destined for them never goes through exit nodes. It is only ever encrypted in a way that is readable only by the specific .onion destination.




Consider applying for YC's W25 batch! Applications are open till Nov 12.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: