Hacker News Reader

Ok on Tor but no https so anyone could get your number/password and steal your identity

Edit: my bad it's late...of course there is no risk of mitm as it's a tor service, so no risk of bad exit node -_-' sorry guys

View on HN

That's not how Tor Hidden Services work. They're encrypted end-to-end (well, from your node to the host of the Hidden Service. So accessing via that address leaves no room* for anyone to get your number/password or steal your identity.

* (Usual caveats about that being the correct .onion address, about the encryption not flawed etc)

Reply on news.ycombinator.com