Silk Road forums

Discussion => Newbie discussion => Topic started by: MrS777888 on April 01, 2013, 01:22 am

Title: Why doesn't Silk Road use SSL?
Post by: MrS777888 on April 01, 2013, 01:22 am
It would certainly do away with PGP ...
Title: Re: Why doesn't Silk Road use SSL?
Post by: Jediknight on April 01, 2013, 01:38 am
I often ask this as well.   Not sure.  As a web developer I say the same thing. 

I think it has to do with TOR. It would become too slow with all the duplicate encryption.  I know hey can't use multimedia on these sites on TOR. And even chat rooms fail sometimes.  It's shaky technology

SSL still makes good sense though just for the order page itself.   They can even do server side PGP as well.  Why bother with PGP stand alone?
Title: Re: Why doesn't Silk Road use SSL?
Post by: MrS777888 on April 01, 2013, 02:00 am
I often ask this as well.   Not sure.  As a web developer I say the same thing. 

I think it has to do with TOR. It would become too slow with all the duplicate encryption.  I know hey can't use multimedia on these sites on TOR. And even chat rooms fail sometimes.  It's shaky technology

SSL still makes good sense though just for the order page itself.   They can even do server side PGP as well.  Why bother with PGP stand alone?

Woohoo! Another IT pro. And yes, it only need to be the order page.

Title: Re: Why doesn't Silk Road use SSL?
Post by: cantharidin on April 01, 2013, 02:27 am
I often ask this as well.   Not sure.  As a web developer I say the same thing. 

I think it has to do with TOR. It would become too slow with all the duplicate encryption.  I know hey can't use multimedia on these sites on TOR. And even chat rooms fail sometimes.  It's shaky technology

SSL still makes good sense though just for the order page itself.   They can even do server side PGP as well.  Why bother with PGP stand alone?

Woohoo! Another IT pro. And yes, it only need to be the order page.


I'm not an IP pro, so maybe I'm full of it, but not being an IT pro, I wouldn't really understand what was going with encryption being handled in some black box on the site. I'm really happy to be able to do my own PGP so that I know it's being done.
Title: Re: Why doesn't Silk Road use SSL?
Post by: MrS777888 on April 01, 2013, 05:12 am
All that would be required is the page you type you address into is to use a technology called SSL (Secure Sockets Layers). It means no one would have to bother with PGP.

It's the same technology banks use for their sites. I mean you never see them asking to send PGP versions of your login details do you?
Title: Re: Why doesn't Silk Road use SSL?
Post by: royalblue on April 01, 2013, 05:27 am
All that would be required is the page you type you address into is to use a technology called SSL (Secure Sockets Layers). It means no one would have to bother with PGP.

It's the same technology banks use for their sites. I mean you never see them asking to send PGP versions of your login details do you?

You are missing the point of using PGP.  If the Silk Road server ever fell into the wrong hands then SSL wouldn't mean shit.

Also 128bit socket layer encryption,which can be decrypted on-the-fly by government, does not replace 2048/4096bit PGP encryption.  As has been noted, TOR traffic is already encrypted.  All communication from your computer to the .onion site is encrypted. 

PGP usage protects your information from everyone except you and the vendor - not even DPR can decrypt it.



Title: Re: Why doesn't Silk Road use SSL?
Post by: numbkitty on April 01, 2013, 05:49 am
hello
Title: Re: Why doesn't Silk Road use SSL?
Post by: MrS777888 on April 01, 2013, 05:56 am
All that would be required is the page you type you address into is to use a technology called SSL (Secure Sockets Layers). It means no one would have to bother with PGP.

It's the same technology banks use for their sites. I mean you never see them asking to send PGP versions of your login details do you?

You are missing the point of using PGP.  If the Silk Road server ever fell into the wrong hands then SSL wouldn't mean shit.

Also 128bit socket layer encryption,which can be decrypted on-the-fly by government, does not replace 2048/4096bit PGP encryption.  As has been noted, TOR traffic is already encrypted.  All communication from your computer to the .onion site is encrypted. 

PGP usage protects your information from everyone except you and the vendor - not even DPR can decrypt it.

Fair enough...
Title: Re: Why doesn't Silk Road use SSL?
Post by: visionenergy on April 01, 2013, 06:00 am
pgp isnt that bad.  Takes about an hour to figure out.  and i like knowing that im getting it encrypted since im doing it myself.   No problems on this side
Title: Re: Why doesn't Silk Road use SSL?
Post by: ChemBot on April 01, 2013, 10:32 am
Quote
You are missing the point of using PGP.  If the Silk Road server ever fell into the wrong hands then SSL wouldn't mean shit.
This is really the key point in my opinion!