Questions tagged [https]

HTTPS is a widely used protocol for authentication of websites and secure plus encrypted communication over a computer network.

8
votes
2answers
408 views

Why doesn't the Tor Browser Bundle include CAcert root cert?

CAcert is a community based approach to create a certificate authority. Many sites use it (i.e. CCC). However the root certificate is not yet present in major browsers and also not in the Tor Browser ...
6
votes
2answers
9k views

“This is a SOCKS Proxy, Not An HTTP Proxy”

As the title says, I've been trying to use Tor as a proxy for Postman and I'm getting the following response when I try to make a request to a specific endpoint that does not support HTTPS ...
5
votes
4answers
5k views

Is my Tor browser's connection to the Tor routing network encrypted?

I have frequently heard that the endpoints of a Tor connection are unencrypted. This makes no sense to me. If the purpose of Tor was originally to protect dissidents in places like China, then why ...
4
votes
1answer
575 views

Is Tor Browser vulnerable to tracking via HSTS Super Cookies?

Is Tor Browser vulnerable to the HSTS Super Cookies tracking technique described here? (Initial experimentation with Tor Browser 4.0.3 suggests it's not: I get a different tracking id after selecting ...
4
votes
1answer
2k views

Using Tor to make HTTPS requests in Python

I have the following code: with Controller.from_port(port = 9151) as controller: controller.authenticate() socks.setdefaultproxy(socks.PROXY_TYPE_SOCKS5, "127....
4
votes
1answer
29 views

How to store certifcates over session?

How can I store trusted certificates for e.g. HTTPS in a manner, that they are still available after restarting of Tor Browser Bundle?
2
votes
2answers
3k views

HTTPS Everywhere and Tor

I don't see an option to install the HTTPS Everywhere add-on on the Tor Browser. Is the HTTPS not needed on the Tor Browser? Does Tor encrypt one's data like the HTTPS Everywhere add-on? I'm new to ...
2
votes
1answer
195 views

Does using HTTP break my anonymity?

The TOR manual says that the sites I visit should display the blue/green HTTPS insignia. The sites I visit do not. Instead when I hover the mouse over the icon at the beginning in the URL bar, it ...
2
votes
1answer
29 views

Does strict transport security survive across restarts?

The TorBrowser will honor HSTS settings during a session, meaning that if you visit an HTTPS site and the HSTS flag is set, the browser will not allow an HTTP downgrade. Does this survive across ...
2
votes
1answer
157 views

Does the TorBrowser support certificate pinning?

To what level does Tor support certificate pinning (aka HPKP, key pinning)? It is my understanding that HPKP is implemented as a cookie can be used as a "super cookie" and thus it would be cleared ...
2
votes
1answer
530 views

HTTPS, HTTP Headers, Privacy and Tor

I have several doubts regarding the HTTPS protocol: - First: Are the HTTPS headers encrypted? I mean, HTTPS encrypts the content, but does it also encrypt the headers? -Second: Navigating with, for ...
2
votes
2answers
75 views

Proxy settings issue/HTTPS issue - warning message

I am using Tor in Tails. To verify that I am connected correctly, I go to IP-check.info. Lately, IP-check.info is giving me a warning message "..you are not using Tor correctly. Your own IP address ...
2
votes
2answers
2k views

Orbot, SSL Error 3 - Why?

I'm in a private network, where everything runs on a proxy, that uses a HTTP, the phone/tablet isn't rooted. On Orbot, I have put in the address, I have put in the ports and all the bridges too. ...
2
votes
1answer
58 views

Why not update Tor browser to the latest NSS?

Firefox ESR uses an older version of NSS than the standard Firefox. Consequences include TLS 1.2 disabled by default, user can enable it, but it is buggier than the lastest version and it does not ...
2
votes
1answer
604 views

Set a tor server behind http proxy

I'm trying to make a tor relay server over a http proxy on a ubuntu 14.04 lts machine. Log output: $ cat /var/log/tor/log Aug 17 18:19:06.000 [notice] Tor 0.2.4.27 (git-412e3f7dc9c6c01a) opening new ...
2
votes
2answers
819 views

failed to curl https url from Privoxy over tor

I have installed privoxy over TOR on a centos server, I can curl successfully simple http page, but failed to get https page like https://www.google.com. Here is my tor conf: SocksBindAddress 127.0....
1
vote
4answers
233 views

TBB disables Perfect Forward secrecy in SSL sites (that provide PFS)?

I have noticed this problem in a few sites. For example, EFF.org is with forward secrecy in its openSSL implementation. When I load it from Tor Browser Bundle and check the "Padlock" icon on address ...
1
vote
2answers
472 views

Tor Dns , Multi Instances [closed]

when using tor expert bundle as a socks proxy dns traffic still appears unencrypted . what are the solutions tor provides for dns ? how can i run multiple instances of tor.exe each with a different ...
1
vote
2answers
128 views

Do tor exit nodes see the URL you're connecting to?

If you connect to a website using https with a some information in the URL, can an exit node see the URL being connected to?
1
vote
1answer
80 views

SSL Requests from a different IP than Non SSL requests

When using tbb,every time I visit Doileak.com,it says Your SSL Requests come from a different IP than your Non SSL requests. Your Proxy seems not to support SSL, which is dangerous as the proxy ...
1
vote
2answers
146 views

How does Tor pass my traffic around and should I be worried about malicious relay operators? [closed]

I am not sure how does Tor work, how safe is it as I heard that some relays are ran by bad people or government agencies.
1
vote
1answer
1k views

SSL certificate for Tor

I have setup a Tor Hidden Service, and have the .onion domain. I wish to setup HTTPS. As I am using a self signed cert when a user visits my site they get a warning, which is extremely off putting. ...
1
vote
2answers
155 views

Is Tor still safe to use if my boss intercepts HTTPS?

My boss intercepts all traffic in the corporate network, including HTTPS (by making computers trust the company certificate). Is it still safe to use Tor in those conditions?
1
vote
1answer
1k views

HTTP proxy over Tor

Can somebody suggest me some HTTP proxy app for Windows? There are a few apps I wanna use over Tor, but they don't support SOCKS proxy, only HTTP proxy. So I need an HTTP proxy that's able to be ...
1
vote
2answers
101 views

Clicking on “Join” link in TripAdvisor does not work!

Total Tor newbie here. I have Tor Bundle with Tor Browser 4.5-alpha-1. I have a problem with certain links - nothing happens at all. As an example, the Join link on www.tripadvisor.com. I assume it ...
1
vote
1answer
473 views

Only HTTPS connections allowed

For whatever reason I can only use HTTPS connection to the internet, regardless of the browser. I'm using Mac Mini with Mountain Lion 10.8. The problem occurs when TorBrowserBundle is not running, ...
1
vote
1answer
420 views

HTTPS problem with Tor Browser Bundle 3.5

I've noticed after running Tor Browser Bundle 3.5 for a few minutes that it will refuse the connection to HTTPS websites. When I turn off HTTPS Everywhere then change a URL from HTTPS to HTTP the ...
1
vote
0answers
639 views

Your connection is not secure

I am trying to setup a .onion address to point to my https site. Every time I try to access it from the .onion address I get a warning in Tor browser: Your connection is not secure. The owner of ...
1
vote
1answer
1k views

Can I get a Let's Encrypt certificate for hidden services? [duplicate]

Is it possible to use Let's Encrypt to generate a certificate for an .onion address? From what I read, it is currently not supported, but I wonder whether there are technical reasons preventing it, ...
1
vote
0answers
197 views

Python JSON fetching via Socks5 proxy on Tails

I am trying to fetch JSON data, via a Python3 script, on Tails. I would like to know that this code is secure and doesn't leak IP or any other stuff. I know that Tails is configured to block any ...
1
vote
0answers
79 views

HTTPSEverywhere bug? (forcing onions)

http://www.kkkkkkkkkk63ava6.onion/wiki/Forcing_.onion_on_Whonix.org Also "Idea 2" in this post: https://blog.torproject.org/blog/cooking-onions-names-your-onions This function of httpseverywhere no ...
1
vote
1answer
292 views

cant see the https\\ when trying to open tor market places such as dream market? [closed]

Apologies to all, I'm a complete novice.. From what i have read and my understanding is that one must see the https\ before the name of the website to know it was totally "safe" or.... "secure" would ...
1
vote
0answers
334 views

How block clearnet in Tor browser?

Some .onion websites contain clearnet links which sends you to https (or http) websites. I understood that https/http is lesser anonymous than .onion. How can I block in Tor browser all links that ...
1
vote
0answers
182 views

Since yesterday, I can not access mercadolibre.com.ar anymore [closed]

Thanks for such a good program. Since yesterday, mercadolibre.com.ar does not work for me anymore. It lets me navigate and view the products but it won't let me login to my account: https://www....
1
vote
0answers
32 views

When Forward Secrecy ciphers are used, the Torproject website uses 1024 bit key exchange; Can this be improved? [closed]

While the website of Torproject uses a 2048 bit certificate, if Forward Secrecy ciphers are used, the key exchange is only 1024 bit: https://www.ssllabs.com/ssltest/analyze.html?d=torproject.org EDIT:...
0
votes
1answer
261 views

TBB Sec Error Unknown Issuer (Comodo CA) [closed]

I'm trying to access https://www.torrentz.com through the Tor Browser Bundle, but I get the "connection not secure" warning. TBB says the issuer certificate is unknown. I can access the site just fine ...
0
votes
1answer
158 views

how to force tor to use just Http(s) Not socks5

A proxy supports only http(S), No socks5. In other words,i want to configure Tor to use HTTP proxy, not an SOCKS proxy.
0
votes
1answer
56 views

Why site security information shows “Connection Is Not Secure”,eventhouth web address show HTTPS?

Is it normal that the site security information always shows "Connection Is Not Secure" on all websites even when the web address shows https.The website identity always shows "This website does not ...
0
votes
1answer
62 views

Fetching JSON via Tor

Hi I am trying to make a code that monitors cryptocurrency prices, so I am fetching JSON data from public sources and then processing it. I am using this python code by @Anurag Uniyal: import urllib....
0
votes
1answer
1k views

405 Method: connection_mark_unattached_ap_()

Nov 12 18:46:07 [removed] Tor[15935]: Saying "HTTP/1.0 405 Method Not Allowed\r\n\r\n" Nov 12 18:46:07 [removed] Tor[15935]: connection_mark_unattached_ap_(): Bug: stream (marked at ../src/or/...
0
votes
1answer
86 views

Anonymity considerations of HTTP referer field [duplicate]

I was just reading about security risks associated with the referrer field and the ticket generated on Tor to probably disable it for anonymity. But I don't really understand the security risks. I ...
0
votes
1answer
48 views

Is there any added value in https over hidden service?

Is there any added value in using https with a hidden service, such as Facebook is doing? Does the SSL provide any more security than regular http?
0
votes
1answer
112 views

not https or secure connection - ISP reads? [duplicate]

If you surf over Tor Browser and go on websites that are not https or secure, can your ISP see those sites? If not, can people see those sites wirelessly, pcap wireshark etc?