Questions tagged [https]
HTTPS is a widely used protocol for authentication of websites and secure plus encrypted communication over a computer network.
56
questions
0
votes
1
answer
77
views
How do I create a TOR site for an already running HTTP server?
I have an HTTPS server made in JavaScript running on port 443 directly (not the best idea, but whatever).
I would like to add an onion domain to this, how should I go about getting the data from the ...
- 103
0
votes
0
answers
227
views
Security question regareding Tor & Anonsurf
So I have been using Parrot Security lately and I have a couple security questions regarding Tor/Anonsurf. First, when I boot up Parrot and open the Tor Browser and click connect, Tor connects, then ...
2
votes
1
answer
94
views
Connecting to Tor Directory Authority via Proxy Server (Protocol Question)
I've been trying to connect to the Tor Network from home, but my country's ISP has blocked all of the Tor Directory Authorities' IPs. No luck reaching them so far. I know, there are bridges, but seems ...
- 125
0
votes
0
answers
50
views
Would this be a reasonably secure website?
If this is something for the Information Security Stack Exchange I understand. I want to know if this hypothetical setup is reasonably secure to the point where it can't be conventionally hacked ...
- 37
0
votes
1
answer
129
views
How to prevent DNS Spoofing attacks with Tor?
This question is an extension of How does Tor handle DNS poisoning.
After having read Introducing DNS Resolver for Tor and DNS security issues, I am a bit concerned about the riscs of using Tor (...
- 15
0
votes
2
answers
312
views
Why doesn't Tor browser block HTTP by default?
Unencrypted HTTP protocol does not protect data from being modified or intercepted. Without a secure connection, the user could be tracked and monitored, deanonymizing them. However, the Tor browser ...
- 844
0
votes
1
answer
46
views
Block http traffic
I configured a hidden service and it works. But when i type the IP into a regular browser, the same web page is hosted from the apache server.
How do i prevent it from serving the http content and ...
- 103
0
votes
1
answer
112
views
HTTPS Everywhere doesn't work all the time
I tried to access http://uniquemachine.org and tor-browser/HTTPSeverywhere-add-on reached it without warning me.
Would you know why ?
How to automatically warn me at every single http:// i'm trying to ...
0
votes
0
answers
69
views
Why doesn't tor connect to Socks4/5 proxies?
I can only connect to HTTPS proxies using FF's proxy feature.
When i put in a socks4/5 proxy in FF, it doesn't connect to the proxy. Can anybody confirm this behaviour ?
My setup:
proxychains v4.14 ...
2
votes
1
answer
149
views
Are contents of a hidden service secure if the service is HTTP?
If I host a hidden service without HTTPS, can a compromised exit node (on either server side or client side), read or write any contents of the site?
Also, is it more secure to use HTTPS on a hidden ...
user27919
0
votes
1
answer
25
views
Tor and Onion Rouitring work whilst SSL is out on my network
I have a weird problem going on: Between 6 and 8 pm I am unable to make any ssl connections through my router - and it effects various devices using a range of operating systems and but wifi and ...
- 1
0
votes
1
answer
321
views
How sending form data over HTTPS using TOR works
I understand in general how TOR works, with creating a circuit from the client using 3 random nodes in the TOR network - the entry node, some internal node, and an exit node.
My question is about how ...
- 103
0
votes
1
answer
189
views
Why site security information shows "Connection Is Not Secure",eventhouth web address show HTTPS?
Is it normal that the site security information always shows "Connection Is Not Secure" on all websites even when the web address shows https.The website identity always shows "This website does not ...
1
vote
2
answers
379
views
Do tor exit nodes see the URL you're connecting to?
If you connect to a website using https with a some information in the URL, can an exit node see the URL being connected to?
- 131
1
vote
0
answers
2k
views
Your connection is not secure
I am trying to setup a .onion address to point to my https site. Every time I try to access it from the .onion address I get a warning in Tor browser:
Your connection is not secure. The owner of ...
- 111
0
votes
2
answers
202
views
Fetching JSON via Tor
Hi I am trying to make a code that monitors cryptocurrency prices, so I am fetching JSON data from public sources and then processing it. I am using this python code by @Anurag Uniyal:
import urllib....
15
votes
2
answers
39k
views
"This is a SOCKS Proxy, Not An HTTP Proxy"
As the title says, I've been trying to use Tor as a proxy for Postman and I'm getting the following response when I try to make a request to a specific endpoint that does not support HTTPS
...
- 151
1
vote
1
answer
3k
views
Can I get a Let's Encrypt certificate for hidden services? [duplicate]
Is it possible to use Let's Encrypt to generate a certificate for an .onion address?
From what I read, it is currently not supported, but I wonder whether there are technical reasons preventing it, ...
- 156
0
votes
1
answer
2k
views
405 Method: connection_mark_unattached_ap_()
Nov 12 18:46:07 [removed] Tor[15935]: Saying "HTTP/1.0 405 Method Not Allowed\r\n\r\n"
Nov 12 18:46:07 [removed] Tor[15935]: connection_mark_unattached_ap_(): Bug: stream (marked at ../src/or/...
1
vote
0
answers
304
views
Python JSON fetching via Socks5 proxy on Tails
I am trying to fetch JSON data, via a Python3 script, on Tails. I would like to know that this code is secure and doesn't leak IP or any other stuff. I know that Tails is configured to block any ...
- 11
1
vote
0
answers
89
views
HTTPSEverywhere bug? (forcing onions)
http://www.kkkkkkkkkk63ava6.onion/wiki/Forcing_.onion_on_Whonix.org
Also "Idea 2" in this post: https://blog.torproject.org/blog/cooking-onions-names-your-onions
This function of httpseverywhere no ...
- 11
4
votes
1
answer
1k
views
Set a tor server behind http proxy
I'm trying to make a tor relay server over a http proxy on a ubuntu 14.04 lts machine.
Log output:
$ cat /var/log/tor/log
Aug 17 18:19:06.000 [notice] Tor 0.2.4.27 (git-412e3f7dc9c6c01a) opening new ...
- 41
0
votes
1
answer
139
views
not https or secure connection - ISP reads? [duplicate]
If you surf over Tor Browser and go on websites that are not https or secure, can your ISP see those sites?
If not, can people see those sites wirelessly, pcap wireshark etc?
- 1
1
vote
1
answer
124
views
SSL Requests from a different IP than Non SSL requests
When using tbb,every time I visit Doileak.com,it says
Your SSL Requests come from a different IP than your Non SSL requests.
Your Proxy seems not to support SSL, which is dangerous as the proxy
...
- 11
3
votes
2
answers
6k
views
HTTPS Everywhere and Tor
I don't see an option to install the HTTPS Everywhere add-on on the Tor Browser. Is the HTTPS not needed on the Tor Browser?
Does Tor encrypt one's data like the HTTPS Everywhere add-on?
I'm new to ...
1
vote
1
answer
335
views
cant see the https\\ when trying to open tor market places such as dream market? [closed]
Apologies to all, I'm a complete novice.. From what i have read and my understanding is that one must see the https\ before the name of the website to know it was totally "safe" or.... "secure" would ...
- 11
2
votes
1
answer
867
views
HTTPS, HTTP Headers, Privacy and Tor
I have several doubts regarding the HTTPS protocol:
- First: Are the HTTPS headers encrypted? I mean, HTTPS encrypts the content, but does it also encrypt the headers?
-Second: Navigating with, for ...
- 107
0
votes
1
answer
137
views
Anonymity considerations of HTTP referer field [duplicate]
I was just reading about security risks associated with the referrer field and the ticket generated on Tor to probably disable it for anonymity. But I don't really understand the security risks. I ...
- 103
0
votes
1
answer
410
views
TBB Sec Error Unknown Issuer (Comodo CA) [closed]
I'm trying to access https://www.torrentz.com through the Tor Browser Bundle, but I get the "connection not secure" warning. TBB says the issuer certificate is unknown. I can access the site just fine ...
- 1,199
1
vote
2
answers
590
views
Tor Dns , Multi Instances [closed]
when using tor expert bundle as a socks proxy dns traffic still appears unencrypted . what are the solutions tor provides for dns ?
how can i run multiple instances of tor.exe each with a different ...
- 13
1
vote
0
answers
614
views
How block clearnet in Tor browser?
Some .onion websites contain clearnet links which sends you to https (or http) websites. I understood that https/http is lesser anonymous than .onion. How can I block in Tor browser all links that ...
- 11
1
vote
1
answer
2k
views
SSL certificate for Tor
I have setup a Tor Hidden Service, and have the .onion domain. I wish to setup HTTPS.
As I am using a self signed cert when a user visits my site they get a warning, which is extremely off putting.
...
- 11
0
votes
1
answer
285
views
how to force tor to use just Http(s) Not socks5
A proxy supports only http(S), No socks5.
In other words,i want to configure Tor to use HTTP proxy, not an SOCKS proxy.
- 103
2
votes
2
answers
1k
views
failed to curl https url from Privoxy over tor
I have installed privoxy over TOR on a centos server, I can curl successfully simple http page, but failed to get https page like https://www.google.com.
Here is my tor conf:
SocksBindAddress 127.0....
- 23
1
vote
2
answers
195
views
Is Tor still safe to use if my boss intercepts HTTPS?
My boss intercepts all traffic in the corporate network, including HTTPS (by making computers trust the company certificate). Is it still safe to use Tor in those conditions?
- 11
4
votes
1
answer
3k
views
Using Tor to make HTTPS requests in Python
I have the following code:
with Controller.from_port(port = 9151) as controller:
controller.authenticate()
socks.setdefaultproxy(socks.PROXY_TYPE_SOCKS5, "127....
- 141
0
votes
1
answer
69
views
Is there any added value in https over hidden service?
Is there any added value in using https with a hidden service, such as Facebook is doing?
Does the SSL provide any more security than regular http?
- 157
2
votes
1
answer
219
views
Does using HTTP break my anonymity?
The TOR manual says that the sites I visit should display the blue/green HTTPS insignia. The sites I visit do not. Instead when I hover the mouse over the icon at the beginning in the URL bar, it ...
- 21
2
votes
2
answers
93
views
Proxy settings issue/HTTPS issue - warning message
I am using Tor in Tails. To verify that I am connected correctly, I go to IP-check.info. Lately, IP-check.info is giving me a warning message "..you are not using Tor correctly. Your own IP address ...
- 21
2
votes
1
answer
231
views
Tor connecting to HTTP
I need Tor to connect to my adult website "test11.easyxtubes.com". For some reason it will not connect as it is HTTP. It seems all tor traffic HTTPS. My question is how can I force tor to connect to ...
- 21
2
votes
1
answer
49
views
Does strict transport security survive across restarts?
The TorBrowser will honor HSTS settings during a session, meaning that if you visit an HTTPS site and the HSTS flag is set, the browser will not allow an HTTP downgrade. Does this survive across ...
- 161
2
votes
1
answer
188
views
Does the TorBrowser support certificate pinning?
To what level does Tor support certificate pinning (aka HPKP, key pinning)?
It is my understanding that HPKP is implemented as a cookie can be used as a "super cookie" and thus it would be cleared ...
- 161
1
vote
1
answer
1k
views
HTTP proxy over Tor
Can somebody suggest me some HTTP proxy app for Windows?
There are a few apps I wanna use over Tor, but they don't support SOCKS proxy, only HTTP proxy.
So I need an HTTP proxy that's able to be ...
- 215
4
votes
1
answer
800
views
Is Tor Browser vulnerable to tracking via HSTS Super Cookies?
Is Tor Browser vulnerable to the HSTS Super Cookies tracking technique described here?
(Initial experimentation with Tor Browser 4.0.3 suggests it's not: I get a different tracking id after selecting ...
- 41
1
vote
2
answers
112
views
Clicking on "Join" link in TripAdvisor does not work!
Total Tor newbie here. I have Tor Bundle with Tor Browser 4.5-alpha-1.
I have a problem with certain links - nothing happens at all.
As an example, the Join link on www.tripadvisor.com.
I assume it ...
- 21
1
vote
0
answers
196
views
Since yesterday, I can not access mercadolibre.com.ar anymore [closed]
Thanks for such a good program.
Since yesterday, mercadolibre.com.ar does not work for me anymore. It lets me navigate and view the products but it won't let me login to my account:
https://www....
- 11
4
votes
1
answer
48
views
How to store certifcates over session?
How can I store trusted certificates for e.g. HTTPS in a manner, that they are still available after restarting of Tor Browser Bundle?
- 141
1
vote
1
answer
807
views
Only HTTPS connections allowed
For whatever reason I can only use HTTPS connection to the internet, regardless of the browser.
I'm using Mac Mini with Mountain Lion 10.8.
The problem occurs when TorBrowserBundle is not running, ...
- 11
2
votes
2
answers
2k
views
Orbot, SSL Error 3 - Why?
I'm in a private network, where everything runs on a proxy, that uses a HTTP, the phone/tablet isn't rooted. On Orbot, I have put in the address, I have put in the ports and all the bridges too. ...
1
vote
0
answers
47
views
When Forward Secrecy ciphers are used, the Torproject website uses 1024 bit key exchange; Can this be improved? [closed]
While the website of Torproject uses a 2048 bit certificate, if Forward Secrecy ciphers are used, the key exchange is only 1024 bit:
https://www.ssllabs.com/ssltest/analyze.html?d=torproject.org
EDIT:...
- 103