23 votes

Is it safe to access HTTP sites from Tor?

No, it is not safe. But the reasoning your read is wrong. When you use Tor, the connection between you and the Tor network is encrypted, so your ISP can not eavesdrop. But when you access a normal ...
user avatar
  • 48.8k
18 votes
Accepted

Onion routing vs crowds

Crowds and Onion Routing are both used to create anonymous networks, but implemented in two different ways. Onion Routing Basic Operation Anonymous networks like Tor rely on passing through ...
user avatar
  • 12.3k
12 votes

Is it safe to access HTTP sites from Tor?

It depends. Specifically, it depends on the type of data you are accessing and your threat model. What protection does HTTPS provide with Tor? Here is a breakdown of some potential adversaries at ...
user avatar
5 votes

Is it safe to access HTTP sites from Tor?

You still need HTTPS since anyone on the Tor exit nodes can read your HTTP traffic. E.g. Tor provides protection so your ISP would have difficulty reading your traffic but it is not end to end ...
user avatar
  • 1,214
4 votes

What's the advantage of connecting to an onion address over a regular domain through Tor?

See this for the advantages of hidden services and how the protocol works. When not using hidden services, Tor just functions as an encrypted proxy (because there is an "exit node" to access ...
user avatar
  • 1,197
4 votes
Accepted

Is it possible to spy on Tor browser within local network?

This answer is based on the assumption that the adversary is able to monitor the traffic to/from your device, but has not compromised your device. In that case, the adversary may be able to see that ...
user avatar
  • 19.8k
3 votes
Accepted

About onion packet and onion routing?

The image below shows how a packet is encrypted, and sent through the network. Tor uses its own protocol to negotiate encryption keys. Through this protocol the client receives encryption keys for ...
user avatar
  • 12.3k
3 votes

What is extra 3 relays in .onion in Tor connection

To connect to a hidden service (.onion site) your computer connects to a random relay, called the rendezvous point and stops there. Then, it tells the server to also connect to the same relay using ...
user avatar
  • 3,866
3 votes

What's the advantage of connecting to an onion address over a regular domain through Tor?

When accessing a site by a standard domain name (such as https://duckduckgo.com) through https over TOR - your connection is routed through a TOR exit node which makes a connection to the site's ...
user avatar
  • 19.8k
2 votes
Accepted

Onion Routing Encryption

Your assumption is correct. When a client sends a request to an onion service, it first makes a connection to the first relay in the circuit, then sends a payload to this first relay. The first ...
user avatar
  • 19.8k
2 votes
Accepted

How to check if you are navigating anonymously

You should look into TOR browser if you're looking to browse the web for the most part anonymously. It's a little more beginner friendly than tails. To answer your question directly, yes, the easiest ...
user avatar
  • 36
2 votes
Accepted

Few Questions About Tor Hidden Services

According to this, when you connect to a hidden service using tor you go through 6 nodes instead of 3... why? To hide the hidden service IP address in case the rendezvous point is under adversary ...
user avatar
  • 3,504
2 votes
Accepted

Creating secure circuit in first generation Onion Routing

In the theory of onion routing, the underlying routing graph is complete. All routing nodes can talk to the initiator's proxy and the receiver's proxy. In TCP/IP terminology, the initiator's proxy, ...
user avatar
1 vote
Accepted

Tor: How does entry nodes communicate with middle nodes? How does middle nodes communicate with exit nodes?

Tor v4 supports TLS 1.3 for connections to relays. In TLS 1.3, session keys are generated using ECDHE, for perfect forward secrecy. Indeed, if you randomly choose a TOR relay from the list of TOR ...
user avatar
  • 19.8k
1 vote

Onion Routing Network: Analyzing the size of the encrypted message to determine distance along a circuit

You're not wrong (except for The Key being deduced part) but the approach is meaningless. You are implicitly assuming information you don't have to solve a problem that doesn't exist. I'll try to ...
user avatar
  • 7,472
1 vote

How to check if you are navigating anonymously

Correct, you just internet search for "what is my ip". You are looking to see if that number is different than your expected home IP address. To get your home IP address, you might check on ...
user avatar
1 vote

Tor Hidden Service In-Depth Questions

To add to the answer above: If b. is true, then the client and hidden service hoster don't communicate outside of the rendezvous point, becuase it's unsafe... So how do they find out which ...
user avatar
  • 3,504
1 vote

Tor Hidden Service In-Depth Questions

Another way I have interpreted this is that the client, nor Tor, needs to know the real IP address of the hidden service hoster, since they only communicate through a rendezvous point, and they both ...
user avatar
1 vote

Tor and Orbot, possibility to add in dynamic AES encryption structure before data is send out?

That cannot be done in any way, because the data leaves the Tor-network on the exit node! The Data is already encrypted until the exit node where it is sent in plain to the public Internet. Any ...
user avatar
  • 5,903
1 vote
Accepted

How to establish VPN connection through Tor?

Actually, tor only provides a socks proxy. So your OpenVPN, for example, needs one additional line: socks-proxy 127.0.0.1 9050 Additionally, you have to exclude tor traffic from vpn, which will not ...
user avatar
1 vote

Onion routing vs crowds

I suppose onion routing as implemented by Tor is a "crowd" implementation (I believe you are referring to google sharing by Moxie and the like with crowds? - please correct me if not). Crowds in ...
user avatar

Only top scored, non community-wiki answers of a minimum length are eligible