What Information Is Revealed When Using Tor and/or HTTPS

eff.org

15 pointsaf160903 comments

Does LetsEncrypt support .onion sites yet?

According to this Stack Overflow answer, it's not necessary to add HTTPS to .onion sites: https://tor.stackexchange.com/questions/6447/do-all-onion-ad...

Part four of this post also discusses HTTPS certs for .onion sites: https://blog.torproject.org/blog/facebook-hidden-services-an...

Thankyou for that. I might contact Digicert and get one to test with. I can see a use case where tor proxy -> server needs TLS. Tor can not protect that last hop if it isn't on the same machine.

Reply on news.ycombinator.com