Is it possible to encrypt all traffic between the last relay and my hidden service site? (I have tried to use an ssl certificate and configure tor like that: HiddenServicePort 443 127.0.0.1:443
but it don't work)
2 Answers
If you're running a hidden service all connections from a Tor client to it are encrypted end-to-end
-
torproject.org/images/htw2.png (the last link between exit node and hidden service is unencrypted)– user1394Commented May 19, 2014 at 17:17
-
-
@yohann2008 tor to regular internet connections are unencrypted from the exit point. but tor to tor connections are encrypted end to end– puserCommented May 20, 2014 at 9:32
-
This is confusing, because the protocol shown in the address bar is http. Are you saying that .onion addresses used through tor are using a layer on top of http to encrypt requests?– B TCommented Oct 7, 2014 at 2:21
As already stated you may offer your service as a hidden service in addition to the public one. That way connections using the onion address will always be encrypted.
The Tor website has a manual for configuring a hidden service.