Questions tagged [onion-routing]

Questions relating to onion routing, and onion routing protocols

59
votes
1answer
26k views

How do onion addresses exactly work?

I understand that the .onion address is a public key of sorts, but not much more than that (I can vaguely guess, though). When nobody knows the IP of the .onion address, how do requests reach it? Are ...
17
votes
3answers
71k views

Where I can find, export or download the biggest list of all .onion addresses?

Where or how I can find, export or download the biggest list of all hidden service .onion addresses?
16
votes
4answers
9k views

Is it possible to make the Tor onion-routing path longer?

By default, Tor uses an onion-routing path with three hops: entry, relay (middle) and exit. Is it possible to configure (or, if necessary, recompile) Tor to use more than three hops? This would lessen ...
15
votes
2answers
1k views

Does Tor insert random delays or perform packet re-ordering to make the discovery of the communication path harder?

If an attacker can observe the Tor user, and the website being visited, it is possible to correlate the traffic by looking at time and size distributions of the communication. Techniques such as ...
14
votes
3answers
6k views

Is running Tor over Tor dangerous?

I've read somewhere that running Tor over another Tor connection is not only non-productive but actually dangerous? For example: say I were running TBB on my machine and was running Whonix in 2 VMs ...
13
votes
3answers
752 views

Are there any vulnerabilities in the process of onion routing?

In onion routing, messages are repeatedly encrypted and then sent through several network nodes called onion routers. Each onion router removes a layer of encryption to uncover routing instructions, ...
13
votes
1answer
4k views

Why does Tor use three hops, instead of two?

With onion-routing a relay in a circuit only knows its predecessor and its successor, while a "normal" proxy is just one hop, so that it knows who connects to it and where it has to connect to. ...
11
votes
1answer
2k views

How are domain names created in the Tor network? [duplicate]

I wonder how the .onion domain names can be created? I mean, I don't assume that there is any central domain name provider. So how and where are those addresses created?
10
votes
4answers
44k views

What are the best Tor2Web anonymous gateways?

What are the best Tor2Web anonymous gateways to make Hidden Web-Services available on clearnet/standard Internet?
9
votes
3answers
4k views

Do all .onion addresses use SSL/TLS?

Do .onion sites encrypt the information going through the exit node? Because a lot of them start with HTTP and not HTTPS.
9
votes
2answers
450 views

Can you make Tor change servers every time I refresh a page?

I'm trying to build a bot but I need it that Tor will change servers every time I refresh the page. I could also use one if I get to manually change it using a command line. Any suggestions?
9
votes
1answer
77 views

Can intermediary nodes learn the length of a circuit?

This should be impossible because of the layered encryption, but some documentation suggests that this can somehow be done. From Section 5.6 [1] of tor's specification When speaking v2 of the link ...
8
votes
6answers
694 views

Releasing a controversial movie torrent using Tor Network for security

I live in a dictatorship and use the Tor Network to get around censorship. I read that Torrenting over Tor Network is not good because of high Internet usage and it slows everything down. For a short ...
8
votes
1answer
730 views

Suddenly my Tor hidden service isn't available

I created a Tor hidden service (a server binded to localhost port and torrc config'd to use the 127.0.0.1 xxxx) for clients to connect to. It was working great for a month or so, and now no one can ...
7
votes
3answers
3k views

Where is the Tor API documentation?

I want to have a program I'm writing interact with the Internet exclusively through Tor. After perusing the Tor project's documentation it appears that they do not specify the API anywhere i.e. how a ...
7
votes
1answer
147 views

Is there any possibility that exit node in one of our sessions will be our own relay?

If we chose to become an exit node at the same time while routing our connections through Tor, is there a possibility that our own exit node is going to be the exit node that we just set up? (As a ...
6
votes
1answer
353 views

What is the best way to reset a .onion address?

I have no particular interest in finding a specific, non-random URL (How do Hidden Services get .onion domains that aren't random?), but would like to reset an onion address for a given hidden ...
6
votes
2answers
1k views

What is the reasoning behind keeping hidden service onion RSA keys at 1024 length?

Is the cost to performance of using larger key length not cost effective? How would it negatively impact anyone if some hosts decided to use a larger key length (i.e. Why isn't anyone free to manually ...
5
votes
2answers
407 views

What would happen when multiple servers are having the same onion hostname?

I'm concern about uniqueness of the onion sites in terms of finding the right onion hostname and publishing it. How I can be guaranteed that my onion site will be the only one in Tor network with the ...
5
votes
2answers
195 views

How does a OR know that it is the cells final destination?

As far as i understood the payload is encrypted in layers and each relay router decrypts its layer as the cell passes along its way to the exit router. Contained within this payload is also the relay ...
5
votes
4answers
7k views

Is there any bridge beetwen Tor and Freenet? Is there way to bridge Freenet site like a Tor hidden service?

Is there any bridge beetwen Tor and Freenet? Is there a way to bridge Freenet site like a Tor hidden service ( onion domain )? E.g. setting up site in Freenet network means, that this site splitted ...
5
votes
2answers
8k views

It is possible to find a Tor page based on the 512-bit hash?

On the internet there is unsolved mystery of 3301/Cicada where decrypted text says: "AN END. WITHIN THE DEEP WEB TH ERE EXISTS A PAGE THAT HA SHES TO: 36367763ab73783c7af284446c ...
5
votes
1answer
930 views

Security advantages of Tor over I2P

What are security advantages of tor over I2P?
5
votes
1answer
2k views

Why does Tor publish IP addresses of exit nodes?

I am new to Tor and currently trying to understand the architecture of onion routing. However, I came across this TorDNSEL which makes it possible (for a tool using TorDNSEL) to detect whether ...
5
votes
1answer
276 views

Is a hidden service's onion address shared with any third parties while hosted?

If I run a hidden service would my onion address get published or become available to anyone without me telling them the actual address? Or, if not, when would my onion address' existence become ...
5
votes
1answer
521 views

How often does a Tor change rendezvous point with hidden service?

I understand how a Tor client connects to a hidden service, but can anyone explain to me how long a rendezvous point is used? According to numbers 10-16 on this post on Tor stack exchange, the ...
4
votes
4answers
2k views

Is it possible to access a dark web server by a public IP instead of an .onion address?

I'm running a web server behind TOR which should only be reachable by an .onion address I've set up. But sometimes I'm worried that the public IP of the server can get leaked somehow. Is the ...
4
votes
4answers
3k views

Can People Scan a .onion Address For Hidden Services?

If I wanted to make a few services (like a website and imap) only available via a .onion address, can someone scan the .onion address to see all the open services that point to it? If I don't want ...
4
votes
1answer
109 views

How random connections are taken care of in Tor network?

In Tor, I heard that traffic is passed through 3 servers in the network before it reaches the destination, and it's encrypted between those 3 servers, and that those 3 computers are chosen randomly. ...
4
votes
1answer
276 views

How do law enforcemnet agencies seize a .onion domain?

I heard that somewhere in the code of a hidden website is problematic and reveals its real IP address, in other cases LE seize a server and discover some other hidden sites on it, and take all of them ...
4
votes
1answer
544 views

How does TOR extend circuit to a third node?

I am reading the Tor: The Second-Generation Onion Router article and my question is that how TOR extends circuit to a third node? On page 7 of the article,left column, it says: To extend the ...
4
votes
3answers
89 views

Multiple adversaries able to deploy large numbers of relays; do they dilute each other's effectiveness?

I note that when researchers analyse some particular types of attacks on Tor security, they assume a SINGLE adversary who is capable of deploying a significant number of relays that will eventually be ...
3
votes
2answers
1k views

What are advantages and disadvantages of Tor with respect to JonDonym?

Objectively, what are the advantages and disadvantages of Tor with respect to JonDonym (formerly known as JAP) in the sense of security and anonymity?
3
votes
2answers
2k views

Finding all onion addresses

Is there any direct way to ask all registered onion addresses from Tor directories? If it is not available, it should be bruteforced for specific ports? I mean all 16 chars onion addresses should be ...
3
votes
3answers
428 views

Using .onions to forward to public .com

HiddenServiceDir /var/lib/tor/hidden_service/site HiddenServicePort 80 tor.stackexchange.com or HiddenServiceDir /var/lib/tor/hidden_service/site HiddenServicePort 80 151.101.129.69:80 ...
3
votes
1answer
140 views

Restarting a tor relay. Does it go back to phase one?

I am wondering if you restart the relay or it is powered down for a period if time, does it go back to phase one and the life cycle starts again? As a new relay?
3
votes
1answer
585 views

How can Facebook's Tor Onion be constantly accessible with the massive bandwidth demand?

Background: (you can skip if you already know the details of Facebook's Hidden Service) In 2014, Facebook unveiled their Tor Hidden Service that let people from restricting governments access Facebook ...
3
votes
1answer
1k views

What's the difference between the Tor proxy and the Browser Bundle?

I have done some research on Tor the past few months, trying to learn more about it's infrastructure, and have been successful for the most part. However, there is something that I can't seem to find ...
3
votes
3answers
942 views

Designing P2P application over Tor

I am building a P2P C++ application that uses tor as a socks proxy to connect to the internet. This P2P app will only connect to other users running the same application, so all the communication ...
3
votes
1answer
235 views

Which kinds of relaying Tor servers are available as “rendezvous points” and “introduction points” for hidden services?

There appears to be several kinds of nodes (Tor instances acting as servers relaying traffic for others): Clients with Relaying disabled (Included in this list only for completion, as their IPs are ...
3
votes
1answer
667 views

How many Tor-like networks are around?

I'm about an idea, onion routing. Are there a secret or governments or a half-secret projects with similar technology? For example, DARPA-BAA-10-69 is a project called "SAFER" (May 20, 2010). The ...
3
votes
2answers
379 views

Running Tor over Tor

So I am going to set up a Raspberry Pi Onion Router and I normally use the browser bundle would it be bad? More effective? Or just as effective as using just the browser bundle?
3
votes
1answer
233 views

Does a Tor node “know” what layer of the onion they are in?

I think a Tor circuit looks like this when sent Key1.Encrypt(Key2.Encrypt(Key3.Encrypt(Key4.Encrypt(Key5.encrypt(DATA))))); ... where KeyX represents the RSA or ECC encryption of a node in the chain....
3
votes
1answer
485 views

Is it possible to have “username@site.onion” addresses and FULLY avoid DNS with email?

I'm only just starting to look into email on Tor - and so far I'm only finding either email hosts whose sites (including webmail login) are hosted on .onion addresses, or whose POP, IMAP and SMTP ...
3
votes
0answers
3k views

Не открываются *.onion сайты (Could not open *.onion sites) [closed]

Translation attempt: I installed the Vidalia bundle (Vidalia, Tor, Polipo) and am not able to load onion sites (hidden services). Why is that?
3
votes
1answer
179 views

When talking about a hidden service, what does it mean to have an encrypted descriptor? [closed]

What is an "encrypted descriptor?" What are the pros and cons of using one? In what version of Tor did they first become available? Are they automatically used (i.e. default)? If not, how do you ...
2
votes
1answer
193 views

Why doesn't torproject.org have an official onion address?

Why doesn't torproject.org have an official onion address? The TBB "Check for Updates" should happen over an onion. It's seems plausible that nation state actors have the ability to mitm such ...
2
votes
2answers
811 views

What is the format of .onion pseudo domain addresses?

What is the format of .onion pseudo-top-level domain addresses?
2
votes
1answer
934 views

Looking to create a onion domain; need some help [closed]

Where can I find a place to register my own onion domain and is there any hosting sites that I could use for hosting for my hidden service?
2
votes
1answer
2k views

Differences between working of Tor and onion routing

I am learning about Tor and Onion routing and I'm trying to compare both services. From the wiki link, I can see that Diffie Hellman (DH) handshake is used and when look into the “tor-design.pdf” for ...