> Unfortunately, we're "as safe as SSL" no matter what, unless the source has a ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		qb on July 7, 2014 \| parent \| context \| favorite \| on: SecureDrop > Unfortunately, we're "as safe as SSL" no matter what, unless the source has a separate way to verify the .onion address on the SSL-protected page. Print it in the physical newspaper. The German computer magazine c't prints their PGP key fingerprints in the masthead.

handsomeransoms on July 8, 2014 | [–]

We've been working on this with some of our deployment partners for a while now :D Great idea! I didn't know anybody else did it, it's cool to hear about c't.

alex_duf on July 7, 2014 | [–]

Clever

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact