Get the latest tech news
Certificates for Onion Services
¶ About¶ This document tracks existing procedures or proposals for integrating and validating TLS/HTTPS certificates for Onion Services. While some depends on Certificate Authorities (CA) model, others rely on alternative certification and validation procedures that does not require built-in certificate chains in the client software or reliance on financial transactions.
Whenever you browse the internet regularly, the connection between your computer and a service is usually encrypted, and the safety of this communication happens through the verification of a special type of certificate. It also opens up new opportunities such as payment processing,"as current PCI DSS requirements do not allow non-standard TLS" and may only work with certificates having some sort of validation. For other applications -- like the TorVPN and third-party software --, this would probably require patches or documentation instructing users to accept non-CA signed certificates when accessing Onion Services, which is very hard to provide and to maintain for a wide ranging of tools.
Or read this on Hacker News
