0

Can exit node tamper traffic before sending it to endpoint? I know it can see it, but the question is, can connection be spoofed, if non-encrypted protocol is used, for example usual HTTP or even TCP socket? Do Tor guarantee message integrity?

2

Yes, the exit node can inspect and tamper with the TCP traffic as it leaves the network. It's impossible for Tor to provide integrity for this traffic. You should always use secure protocols like TLS/HTTPS over Tor (and even when using the Internet outside of Tor).

2
  • So the connection between torified client and hidden service cannot be tampered?
    – Vlad
    Jun 28 '21 at 15:28
  • Right, with onion services, the connection from the client's tor proxy to the onion service's tor proxy is end-to-end encrypted.
    – Steve
    Jun 29 '21 at 0:17
0

It highly depends on the traffic's nature. If it's a regular or unencrypted one - then the answer is yes, but if you do utilize TLS, SSL and PGP properly - the answer is no

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.