I am aware that a login to google or whatever other site will leave me unmasked and destroys my anonymity. Yet I still would 'login' from the exit-nodes location, correct? Can I trust Tor, when sending credentials? (e.g. may the exit-node be able to read the credentials or redirect me to another destination?)
1 Answer
The web service will only see the exit node IP. The exit node can sniff your credentials if you send them over a non-https connection.
So by using https you stay relatively secure, it does not automatically mean that you get unmasked, but they can (if they check) see that you connected to your email through a tor exit node, but not what your initial location \ ip is (your home IP etc).
-
thank you for the answer! how easy is it for the an exit-node to redirect a request to a different destination (https)? Commented Sep 10, 2014 at 8:29
-
1Read the answer here: security.stackexchange.com/questions/24971/… It explains how it all works.– IAmNooneCommented Sep 10, 2014 at 8:55