I routinely access www.email-provider-of-my-choice.com via browser over Tor. My browser enforces https-only mode and I opt for never saving my credentials with this provider. I tend to use the domain address and not the Tor address of my email provider. Most of the time I access the internet via router which I control.
I do need to access my email when I occasionally travel (that includes accessing the internet via gateways that I do not control). From what I gathered accessing a website through Tor/VPN does somewhat reduce my attack surface.
And yet the following crossed my mind:
- The Tor exit node may be malicious or it may be under attack as well (the node itself or its gateway).
- There may some sort of global attack on the DNS servers that give response to
Thus, my questions are following:
- Does using raw IP to access my email provider reduce my attack surface in case of 1 and 2?
- How does it fare in comparison with using a Tor address of this provider?
- Does using IP address expose me to any new threat when compared with accessing the service via DNS?
I'm well aware that using a service via its IP instead of DNS does rely to some extent on the latter, i.e.
I need to
ping www.email-provider-of-my-choice.com at least once, and perhaps to
ping it one more time when I travel or when the address changes, in order to get their IP.
The user experience of using raw address is not a problem to me, let it be outside of the scope of the question.