Twitter's onion service is serving an invalid TLS certificate since 3/6/2023(twitter3e4tixl4xyajtrzo62zg5vztmjuricljdp2c5kshju4avyoid.onion) |
Twitter's onion service is serving an invalid TLS certificate since 3/6/2023(twitter3e4tixl4xyajtrzo62zg5vztmjuricljdp2c5kshju4avyoid.onion) |
Not especially interesting, but probably an indication that some of the non-core stuff is getting overlooked.
https://blog.torproject.org/facebook-hidden-services-and-htt...
Also, the TLS cert would be signed by a CA, and so that CA can independently determine that the site has been commandeered and revoke the cert. (Not that I expect a CA would actually do this in a timely manner if the commandeering is done on behalf of a state actor — but that's more a fault in our current CA system than a fault in the logic of X.509 trust infrastructure itself.)
.onion certs can now go the whole chain such that you don't need to rely on non-tor access to do the auth
Great example of a distraction that the Musk downsizing properly removed.
If not phone number, they have your IP and location, timezone, likely waking hours, private chats, search queries, who you communicate with and when etc. If not collected by the webmaster then it is automatically collected by whatever government the server sits in (+ whatever governments that government trades data with).
The times of anonymity on the internet/clearnet are long gone.
It certainly is not, that's what we did all that HTTPS perfect forward secrecy for.
Of course they don’t care, not only because Musk is full of shit, but also because of billions from Saudis.
If Musk actually cared about free speech like he says he does, onion services would be a priority. But obviously that's just hot air. You can't have it both ways.
Twitter's Onion handling hasn't been reasonably functional for years, so in this particular case it's not that.
Bigger picture - given the role news making and sharing in real time has always played in Twitter, it seems logical that services which may not provide obvious returns but which build a platform that journalists find useful would help do that.
This feels more like uncontrolled infrastructure rot/lack of maintenance rather than a conscious decision to cut unnecessary parts of it.
Oh, right, the topic that neither of us were actually taking about. Yep, I don't think anyone reasonably minded would be using a twitter tor exit node with twitters current reputation. Probably best to remove a service that no one would ever trust you enough to use.
Its much more likely that it just isn't something they want to spend time on.
https://developer.mozilla.org/en-US/docs/Web/Security/Secure...
I think it was laudable that Twitter ran one in the first place. Sad to see it languish.
A degraded service can be worse than an offline one.