Finding Hidden services

Clearnet links:

- https://hiddenonion.net/

- https://tor.taxi/

How do these website maintainers find and verify authenticity of PGP signatures/Hidden Services?

dark.fail is one no ?

On tor.taxi add the name of the service to the end of the URL and it will sometimes show a PGP signed message. For example https://tor.taxi/tforum. On hiddenonion.net click the Verify button.

Dark.fail is notoriously awful.

why ?

Please search for dark.fail on tforum and you'll find posts telling you why.

i found this:

what about dark.fail ? ive realised his pgp key is outdated since 2023 .. also raises red flag on my kleopatra, should we be concerned? also thank you for your help ;), also does tforum have a page for there signed message for .onion veriification?

someone commented this, but like where is the issue like ok fake links but whats the risk is it a man in the middle copied site type of risk or what are we talking about.

Could u just explain this to me if u know why its bad, searching on tforum is a bit tedious tbh

For one the website isn't even accessible right now. Second of all they were paid to add phishing links in the past.

ouch okay but like is it known in what way the links where used for phishing is it like pharming or smth else u know ?

appreciate the info.