[liberationtech] Tor2web support for HTTPS on .onion

[carlo von lynX]

Scusa, Giovanni...

On Tue, Nov 18, 2014 at 10:38:41AM +0100, Giovanni Pellerano wrote:
> As Facebook has recently opened its own onion site [3], we’ve been
> coordinating this release with Alec Muffett from Facebook in order to
> block access to Facebook by means of the Tor2web proxy. Because Facebook
> has a normal website, using Tor2web merely presents an option for users
> to hurt themselves.  You can see the Facebook block here:
> https://facebookcorewwwi.tor2web.org

It is non-obvious to me how accessing FB over T2W would be hurting users.
If tor2web hands the TLS negotiation through from the web browser to the
Facebook backend, the tor2web proxies therefore do not have access to
cleartext Facebook/user data, how would this be bad for the user?

Hoping to understand better, Carlo.


-- 
	    http://youbroketheinternet.org
 ircs://psyced.org/youbroketheinternet