Certificates for Onion Services

45 keepamovin 2 8/28/2025, 3:05:42 AM onionservices.torproject.org ↗

Comments (2)

xg15 · 2m ago
Does external cert validation for onion domains even make sense? I thought the "domain name" was already the hash of some public key that is used in the normal encryption of the onion router - so there is already a mandatory cryptographic proof that the service you're talking with "owns" the domain. What additional security benefit would CA-signed certs bring?
jontro · 37s ago
They write the following reason in the article: But as the web and other internet technologies mature, certificates are starting to be a requirement in order to unleash functionalities, especially in web browsers, such as the faster connection protocol HTTP/2 and payment processing.