4

I'm using Tor browser for my internet surfing and check my email, my questions are

  1. Is my internet services provider able to see the websites I visited
  2. Is it possible to retrieve a login information like username and password of my email account from intermediate node between Tor browser and web server
  3. Is it possible to retrieve email content like mail body and attchments from intermediate node
4
  1. Is my internet services provider able to see the websites I visited

No. Your Internet service provider can not see which website you visit (I suppose you use Tor correctly without your personal settings/configurations you may have done. Tor will take care of your DNS leaks and so on)

  1. Is it possible to retrieve a login information like username and password of my email account from intermediate node between Tor browser and web server

First of all, using your credentials to log into this or that website breaks, by time, the anonymity Tor provides you. Also, an attacker may eavesdrop the exit nodes where Tor does not control the traffic.

  1. Is it possible to retrieve email content like mail body and attachments from intermediate node

Once again, using your credentials through Tor breaks your anonymity. Tor intermediate nodes are too hard theoretically to break (of course, there are buts). Real life eavesdropping that targeted Tor users has been done on exit nodes such as when this Swedish researcher compromised username/passwords of lot of Tor users (in which case, of course, your attachments and so on are also compromised)

  • when packet arrive to exit node packet still encrypted with SSL? – dilee Oct 14 '15 at 6:10
  • 1
    @dilee Yes, it is still encrypted. But Tor does not encrypt that packet between the exit nodes and the destination. – user45139 Oct 14 '15 at 6:12
1

In theory no; the point of Tor is each intermediate node (called a relay node) has it's own layer of encryption. However the last node before the message reaches it's final destination (called the exit node) will be able to see the unencrypted version of the message. I think this article states it nicely:

Tor Exit Nodes are the gateways where encrypted Tor traffic hits the Internet. This means an exit node can be abused to monitor Tor traffic (after it leaves the onion network). It is in the design of the Tor network that locating the source of that traffic through the network should be difficult to determine. However if the exit traffic is unencrypted and contains identifying information then an exit node can be abused.

As with any other anonymity system, Tor isn't perfect. For a list of weaknesses I suggest checking out the wikipedia article.

Assuming Tor works the way it is intended to, the answer to 1., 2., 3. is no.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.