Delivery-Date: Thu, 21 Jan 2016 14:35:22 -0500
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.1 required=5.0 tests=BAYES_00,DKIM_SIGNED,
	RCVD_IN_DNSWL_MED,T_DKIM_INVALID,T_RP_MATCHES_RCVD autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id ECE471E030D;
	Thu, 21 Jan 2016 14:35:19 -0500 (EST)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id 587B439396;
	Thu, 21 Jan 2016 19:35:11 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id 88CBB392BF
 for <tor-talk@lists.torproject.org>; Thu, 21 Jan 2016 19:35:07 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at 
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id bz_IYMRNer6l for <tor-talk@lists.torproject.org>;
 Thu, 21 Jan 2016 19:35:07 +0000 (UTC)
Received: from out3-smtp.messagingengine.com (out3-smtp.messagingengine.com
 [66.111.4.27])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by eugeni.torproject.org (Postfix) with ESMTPS id 6C48539252
 for <tor-talk@lists.torproject.org>; Thu, 21 Jan 2016 19:35:07 +0000 (UTC)
Received: from compute3.internal (compute3.nyi.internal [10.202.2.43])
 by mailout.nyi.internal (Postfix) with ESMTP id 5A61620C6D
 for <tor-talk@lists.torproject.org>; Thu, 21 Jan 2016 14:35:04 -0500 (EST)
Received: from frontend1 ([10.202.2.160])
 by compute3.internal (MEProxy); Thu, 21 Jan 2016 14:35:04 -0500
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=veryspeedy.net; h=
 content-transfer-encoding:content-type:date:from:in-reply-to
 :message-id:mime-version:references:subject:to:x-sasl-enc
 :x-sasl-enc; s=mesmtp; bh=EN4ceO92WaRgzHWkrAnELWbTUdI=; b=MLTTJ8
 ef0AJ9EJNBk3TsuYAmVpsOKgwkRSJOpnM0c0Pf1AMQ/DtWfyyfkPVfMXDMKF83+b
 Zd4ucMdny4PCyOwlqLJfwFZEOcgSjOg8dPGtZo3b2To1TFgx1bOQ0/OpdQMXFCzY
 aQe32IpOPzeeglcckZh+5ME4/KuyxpfTyoc5E=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=
 messagingengine.com; h=content-transfer-encoding:content-type
 :date:from:in-reply-to:message-id:mime-version:references
 :subject:to:x-sasl-enc:x-sasl-enc; s=smtpout; bh=EN4ceO92WaRgzHW
 krAnELWbTUdI=; b=TRUowuYo5X4k2ydZLXw8jhn6YLWixt3phqixdInJEuEq9CF
 HSaXJ7c7gngo1U4sSxhT8sjI9FR1nfBUk7CI6BKF9NCdIOV6fEkej/jYKRfQtmfy
 3ccmKWlA2bVqWRpCRcYa9fh1Ngy1Xx1gGQzT4kbkJNY2T63xytDjnlaFNa98=
X-Sasl-enc: CJ2EKww/0f/L/ooY4PZ7YKjOK92X3OZK7S6x0nTDtoF1 1453404903
Received: from 127.0.0.1 (unknown [193.90.12.86])
 by mail.messagingengine.com (Postfix) with ESMTPA id 60FE7C01714
 for <tor-talk@lists.torproject.org>; Thu, 21 Jan 2016 14:35:03 -0500 (EST)
To: tor-talk@lists.torproject.org
References: <20160116212250.GA14827@ix-293.local>
 <569BA25E.4040108@emails.veryspeedy.net> <20160119215936.GL22628@ix.home>
From: Lara <lara.tor@emails.veryspeedy.net>
Message-ID: <56A132D6.8040202@emails.veryspeedy.net>
Date: Thu, 21 Jan 2016 19:34:46 +0000
MIME-Version: 1.0
In-Reply-To: <20160119215936.GL22628@ix.home>
Subject: Re: [tor-talk] trusting .onion services
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

Rejo Zenger:
>> The user can call the admin and ask the admin to read aloud the key
>> fingerprint.
> 
> Yes, I like the idea. Still, I think this is not scalable, do you 
> think?

In this case you will have to trust somebody who has already done that.
Maybe. Or probably the one you know trusts somebody else. Each step the
risks increase and the chance of you finding out the key was compromised
decreases. Finally, it is your call.

Cheers!

-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

