Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

When you have a website that's hosted within the Tor network and one accesses this website with a Tor browser, does this person still use an exit-node ?

Or will this be an encrypted connection between the server and the client's browser?

(I'm talking about the Tor encryption that's used, so intermediary nodes can't decrypt traffic)

I want to know when surfing to a Tor website if traffic still passes through a random exit node ( like when not surfing to a tor website) or not.

Any documentation on this is highly appreciated as well.

share|improve this question
up vote 4 down vote accepted

All traffic happens within the TOR network, and there is no normal exit-node involved.

There is a node serving as rendevouz point, where your circuit, and the circuit of the hidden service meet. But the messages itself are end-to-end encrypted, so unlike an exit-node(used with an unencrypted protocol such as http), it can't listen in on your communication.

For a detailed description of how TOR hidden services work, check: Tor: Hidden Service Protocol

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.