Sheet TG-07-Q2 / VOUCHER
Voucher Questions on the Tor Guide Desk
Dated citations. Not a root of trust.
A voucher on this tor guide is a dated citation of a v3 onion name, not an official registry entry. The modern name contains fifty-six characters derived from an Ed25519 public key, checksum, and version byte. That construction makes the name self-authenticating for a key, but it does not tell a reader which market name, if any, should be associated with that key.
Attribution comes from outside the string, ideally through a PGP-signed statement tied to a fingerprint established before the current search. A page cannot authenticate its own pasted address by surrounding it with familiar branding.
This room focuses on comparison and source history because lookalikes exploit visual recognition, short prefixes, and hurried clipboard use.
I. How this tor field guide cites a string without freezing it
Format validation is the first check and the least conclusive. A malformed or wrong-length name can be rejected immediately, but an attacker can generate a perfectly valid v3 service. The fifty-six-character rule therefore removes obvious errors without ranking the valid candidates. Any directory that calls format alone verification is overstating what the protocol provides.
A citation should record exactly where the string came from, when it was collected, and whether the source text carried a verifiable signature. If the station received the identifier in operator-provided material, that origin remains part of the label. If a later signed rotation message changes the set, preserve the old date rather than silently presenting the history as continuous.
Three identifiers on a plot card reflect the set cited for this archive on 8 September 2026. Their number is not evidence of common control. Each needs its own match to attributable source material, while any additional name found in an advertisement, search snippet, or comment remains an unverified extra until stronger evidence connects it.
II. Onion itinerary that refuses paste-first habits
An onion itinerary that begins with copy-and-paste reverses the evidentiary order. Establish client provenance, obtain an independent voucher, and compare the complete name before using it for research. Checking only a recognisable prefix and suffix leaves a long central region where substitution can hide, particularly when several similar strings are viewed in adjacent tabs.
Homoglyph is often used loosely in this context. The v3 alphabet is constrained, so not every Unicode lookalike can occur inside the onion name itself; attackers can still use deceptive characters in surrounding clearnet domains, labels, and interface text, while generating onion names with appealing prefixes. The broader lesson is to compare exact machine characters rather than visual impression.
Copy controls deserve similar caution. JavaScript can place clipboard text that differs from a visible label, and a compromised client can alter both display and clipboard. If a copy feature exists, inspect the resulting plain text against the trusted source instead of treating the interaction as approval from the archive.
III. Station notes on glance-checks and old generations
Station notes reject the idea of a permanently official paste. Operators can rotate keys, lose control, publish disputed messages, or disappear; archives can also become stale. A date and source allow the citation to age honestly. Removing those labels would transform a historical record into an unsafe directory entry.
The tor guide voucher room also keeps brand and key evidence separate. Logos, colour schemes, PGP key names, and market labels are all strings an impersonator can copy. Cryptographic value comes from verifying a signature with the expected fingerprint and confirming that the signed payload contains the exact onion name under review.
If no prior trust reference exists, the honest outcome is unresolved attribution. A researcher may document candidate strings and public claims without visiting them or declaring one genuine. That restraint is not a failure of the method; it is the method exposing the evidence that is missing.
IV. Voucher questions that refuse a directory
What is a voucher on this desk?
It is a v3 onion-name citation carrying a source description and September 2026 date. The station does not present it as a registry record, live probe, or substitute for independent signature verification.
Why three strings per plot?
The archive records three identifiers circulating in the material it assessed. Multiple names may reflect claimed redundancy, but quantity cannot demonstrate that one operator controls them.
Will this page always show the same paste?
Not necessarily. A later edition may document rotation or correct a citation, with a new date and explanation. Freezing an old identifier without context would make the archive misleading.
Close of sheet
Leave this room with a comparison procedure rather than a souvenir. Exact characters, attributable signed text, an established fingerprint, and a date matter more than familiarity or search position.
The tor guide can preserve citations, but it cannot become the root of trust for its own citations. When independent evidence is absent, label the string unresolved and stop there. That label protects the record from false certainty.