tordark

Cass Holloway

Cass Holloway is the privacy and operational-security researcher who writes and maintains tordark. The work is hands-on, not academic. It means years spent confirming that cryptographic service addresses match the keys that sign them, reading the public record of how anonymity tools succeed and fail, and turning that into guidance a non-specialist can use. This page gives the byline on every article a stable, accountable identity.

Focus and expertise

Holloway covers a small set of subjects in depth rather than a broad survey. There are four: the Tor anonymity network, PGP and signature verification, operational security for ordinary users, and the privacy properties of cryptocurrencies. One idea runs through all of them. It is the difference between trusting that something is genuine and being able to prove it with a key.

How the work is framed

Expertise here rests on method and experience, not on titles. tordark claims no licenses, degrees, or employers for its author, because such claims are unverifiable and beside the point. What matters is whether the reasoning and the sources hold up. Holloway writes in the first person only to describe a method or an assessment, never to assert a personal history a reader could not check.

Editorial standards

Every concrete fact in Holloway's writing is sourced to the public record, and current-state claims carry the month they were checked. The standard is consistency. The same definitions and the same verification-first stance appear on every page, without drift between them. Where a fact cannot be sourced, it is not asserted. Where an error is found, the page is corrected and re-dated rather than quietly changed.

Contact and verification

Correspondence with Holloway runs over encrypted channels, and any signed message can be checked against a published PGP key, which makes impersonation easy to catch. The key's fingerprint is 8F2F 6A9F 59CE B709 D91E FF69 9802 99FE 86E0 C051, and the full key and contact address are on the contact page; treat any message whose signature does not verify against it as an impersonation. Readers can review the project's standards on the about page and how the work is verified.

↑ Top