Can exit node tamper traffic before sending it to endpoint? I know it can see it, but the question is, can connection be spoofed, if non-encrypted protocol is used, for example usual HTTP or even TCP socket? Does Tor guarantee message integrity?
2 Answers
Yes, the exit node can inspect and tamper with the TCP traffic as it leaves the network. It's impossible for Tor to provide integrity for this traffic. You should always use secure protocols like TLS/HTTPS over Tor (and even when using the Internet outside of Tor).
-
So the connection between torified client and hidden service cannot be tampered? Commented Jun 28, 2021 at 15:28
-
Right, with onion services, the connection from the client's tor proxy to the onion service's tor proxy is end-to-end encrypted.– SteveCommented Jun 29, 2021 at 0:17
It highly depends on the traffic's nature. If it's a regular or unencrypted one - then the answer is yes, but if you do utilize TLS, SSL and PGP properly - the answer is no
answered Jul 3, 2021 at 1:03
