| 
					
				 | 
			
			
				@@ -151,18 +151,14 @@ 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				    information into the hostname will be too long for a typical hostname, 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				    we instead use a layer of indirection. We encode a hash of Bob's PK 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				    (10 bytes is sufficient since we're not worrying about collisions), 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				-   and also the authentication token (empty for now). Thus at a bit more 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				-   than 6 bits encoded per character (assuming only alphanumeric and 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				-   hyphen), we transform the hostname "moria.mit.edu" into the hostname 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				-   "moria.mit.edu.onion5gfmjsda-ckd5" (adding 13 characters plus the 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				-   separator). 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				- 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				-   [I thought we were going to do something more like "56fmjsda-ckd5.onion", 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				-   leaving off moria.mit.edu.  This would have the advantage of not confusing 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				-   users if the domain name part ('moria.mit.edu') doesn't match the key. 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				- 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				-   Also, having a separate onion 'virtual TLD' is kinda more in the spirit 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				-   of DNS as it stands. -NM] 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+   and also the authentication token (empty for now). Location-hidden 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+   services use the special top level domain called '.onion': thus 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+   hostnames take the form x.y.onion where x is the hash of PK, and y 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+   is the authentication cookie. If no cookie is required, the hostname 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+   can simply be of the form x.onion. Assuming only case insensitive 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+   alphanumeric and hyphen, we get a bit more than 6 bits encoded 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+   per character, meaning the x part of the hostname will be about 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+   13 characters. 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				  
			 | 
		
	
		
			
				 | 
				 | 
			
			
				    Alice's onion proxy examines hostnames and recognizes when they're 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				    destined for a hidden server. If so, it decodes the PK, looks it up in 
			 |