securedrop.org directory explains sources should compare the onion URL in the directory with the one on the news org page implemented
MITIG105 · Implemented: In place. · Defined in mitigations.py:276
Threats it mitigates
| Threat | Status | Risk | After mitigations |
|---|---|---|---|
| Source goes to wrong source interface onion URL THREAT89 | partially mitigated | 9 high | 9 high |
| SecureDrop.org compromised THREAT52 | partially mitigated | 6 medium | 4 medium |
Possible further mitigation for
| Threat | Status | Risk | After mitigations |
|---|---|---|---|
| Landing page TLS private key compromised THREAT122 | partially mitigated | 6 medium | 6 medium |