23
votes
Is it safe to access HTTP sites from Tor?
No, it is not safe. But the reasoning your read is wrong.
When you use Tor, the connection between you and the Tor network is encrypted, so your ISP can not eavesdrop. But when you access a normal ...
- 48.8k
18
votes
Accepted
Onion routing vs crowds
Crowds and Onion Routing are both used to create anonymous networks, but implemented in two different ways.
Onion Routing
Basic Operation
Anonymous networks like Tor rely on passing through ...
- 12.3k
12
votes
Is it safe to access HTTP sites from Tor?
It depends. Specifically, it depends on the type of data you are accessing and your threat model.
What protection does HTTPS provide with Tor?
Here is a breakdown of some potential adversaries at ...
- 1,571
5
votes
Is it safe to access HTTP sites from Tor?
You still need HTTPS since anyone on the Tor exit nodes can read your HTTP traffic.
E.g. Tor provides protection so your ISP would have difficulty reading your traffic but it is not end to end ...
- 1,214
4
votes
What's the advantage of connecting to an onion address over a regular domain through Tor?
See this for the advantages of hidden services and how the protocol works.
When not using hidden services, Tor just functions as an encrypted proxy (because there is an "exit node" to access ...
- 1,197
4
votes
Accepted
Is it possible to spy on Tor browser within local network?
This answer is based on the assumption that the adversary is able to monitor the traffic to/from your device, but has not compromised your device.
In that case, the adversary may be able to see that ...
- 19.8k
3
votes
Accepted
About onion packet and onion routing?
The image below shows how a packet is encrypted, and sent through the network.
Tor uses its own protocol to negotiate encryption keys. Through this protocol the client receives encryption keys for ...
- 12.3k
3
votes
What is extra 3 relays in .onion in Tor connection
To connect to a hidden service (.onion site) your computer connects to a random relay, called the rendezvous point and stops there. Then, it tells the server to also connect to the same relay using ...
- 3,866
3
votes
What's the advantage of connecting to an onion address over a regular domain through Tor?
When accessing a site by a standard domain name (such as https://duckduckgo.com) through https over TOR - your connection is routed through a TOR exit node which makes a connection to the site's ...
- 19.8k
2
votes
Accepted
Onion Routing Encryption
Your assumption is correct. When a client sends a request to an onion service, it first makes a connection to the first relay in the circuit, then sends a payload to this first relay. The first ...
- 19.8k
2
votes
Accepted
How to check if you are navigating anonymously
You should look into TOR browser if you're looking to browse the web for the most part anonymously. It's a little more beginner friendly than tails.
To answer your question directly, yes, the easiest ...
- 36
2
votes
Accepted
Few Questions About Tor Hidden Services
According to this, when you connect to a hidden service using tor you
go through 6 nodes instead of 3... why?
To hide the hidden service IP address in case the rendezvous point is under adversary ...
- 3,504
2
votes
Accepted
Creating secure circuit in first generation Onion Routing
In the theory of onion routing, the underlying routing graph is complete. All routing nodes can talk to the initiator's proxy and the receiver's proxy. In TCP/IP terminology, the initiator's proxy, ...
- 320k
1
vote
Accepted
Tor: How does entry nodes communicate with middle nodes? How does middle nodes communicate with exit nodes?
Tor v4 supports TLS 1.3 for connections to relays. In TLS 1.3, session keys are generated using ECDHE, for perfect forward secrecy.
Indeed, if you randomly choose a TOR relay from the list of TOR ...
- 19.8k
1
vote
Onion Routing Network: Analyzing the size of the encrypted message to determine distance along a circuit
You're not wrong (except for The Key being deduced part) but the approach is meaningless.
You are implicitly assuming information you don't have to solve a problem that doesn't exist. I'll try to ...
- 7,472
1
vote
How to check if you are navigating anonymously
Correct, you just internet search for "what is my ip". You are looking to see if that number is different than your expected home IP address. To get your home IP address, you might check on ...
- 461
1
vote
Tor Hidden Service In-Depth Questions
To add to the answer above:
If b. is true, then the client and hidden service hoster don't
communicate outside of the rendezvous point, becuase it's unsafe... So
how do they find out which ...
- 3,504
1
vote
Tor Hidden Service In-Depth Questions
Another way I have interpreted this is that the client, nor Tor, needs to know the real IP address of the hidden service hoster, since they only communicate through a rendezvous point, and they both ...
- 9,383
1
vote
Tor and Orbot, possibility to add in dynamic AES encryption structure before data is send out?
That cannot be done in any way, because the data leaves the Tor-network on the exit node!
The Data is already encrypted until the exit node where it is sent in plain to the public Internet.
Any ...
- 5,903
1
vote
Accepted
How to establish VPN connection through Tor?
Actually, tor only provides a socks proxy. So your OpenVPN, for example, needs one additional line:
socks-proxy 127.0.0.1 9050
Additionally, you have to exclude tor traffic from vpn, which will not ...
- 213
1
vote
Onion routing vs crowds
I suppose onion routing as implemented by Tor is a "crowd" implementation (I believe you are referring to google sharing by Moxie and the like with crowds? - please correct me if not).
Crowds in ...
- 610
Only top scored, non community-wiki answers of a minimum length are eligible