Back to matrix

F06-TO: Yes

Rationale

The onion-service rendezvous handshake establishes keys between the client and onion service, beyond the separate relay-link encryption. The rendezvous relay joins circuits without becoming the application plaintext endpoint. The boundary ends at the service's Tor endpoint; a separate backend connection is not automatically protected.

Assessment method

Individual review of inherited classification; no protocol execution

Source context

Primary specification / explicit endpoint and observer scope

Public sources