Questions tagged [tls]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
53 views

API to get Tor SSL certificates

Some onion websites, like facebook, have TLS implemented on top of Tor. Is it possible to fetch the certificates and TLS versions of these connections using something like torpy?
Yousuf Badawi's user avatar
1 vote
1 answer
78 views

TLS Session Resumption - Enabled or not?

I am trying to figure out if TOR is implementing session resumption or not. Last open discussion I found was this one: https://gitlab.torproject.org/legacy/trac/-/issues/17252 which seems to say that ...
manolia's user avatar
  • 11
2 votes
0 answers
634 views

Detailed Understanding of Tor's connection establishment

I am really new to Onion Routing and Tor and I have just started reading about the topic on Wikipedia and the Tor Protocol Specification. Most of the concepts are explained very well but I have ...
BeniEnge's user avatar
1 vote
0 answers
150 views

RSA keys explanations

I am currently reading the Tor Spec (and other Tor-related technical documents) and have some questions about RSA keys. I can't understand why the "connection key" is used to establish the TLS ...
Antoine Duquenoy's user avatar
0 votes
1 answer
174 views

What is mean "www.wiaakidaayd.com" in wireshark when i establish tor connection using Tor Browser?

I am just get started in wireshark and tor, so please don't laugh) When i establish connection to tor, using tor browser i saw in wireshark some unclear packet. After SYN (9) -> SYN,ACK (10) -> ACK ...
Gudsaf's user avatar
  • 103
1 vote
1 answer
423 views

Latest TBB never accept self-sign certificate

about:preferences#advanced -> Certificates -> ViewCert In Firefox, I can add my own self-sign cert to browser. However, in latest TBB(6.0+) I can't add certificate. This is annoying because I ...
Toooory's user avatar
  • 11
2 votes
2 answers
111 views

Why Tor node maintains TLS keys with every other Tor node?

I read that Tor proxy maintains key with each Tor node for encryption. Then, why does a Tor node maintains TLS keys with other Tor nodes?
user3857907's user avatar
3 votes
0 answers
240 views

Unable to connect to Tor network using TLS [duplicate]

I'm behind a corporate proxy, Tor always worked fine (using bridges) until few days ago, it seems that now the proxy only accepts TLS connections (no SSLv2/v3); Is there a way to solve this issue? I ...
Arturo's user avatar
  • 31
2 votes
1 answer
394 views

Tor TLS cipher suite negotiation and fingerprint defense

In reading this bug I can see that, in the past, Tor has been fingerprinted based on the cipher suites negotiated in the initial TLS handshake. Originally it looks like a copy of the cipher suites in ...
Lizbeth's user avatar
  • 1,264
1 vote
0 answers
51 views

When Forward Secrecy ciphers are used, the Torproject website uses 1024 bit key exchange; Can this be improved? [closed]

While the website of Torproject uses a 2048 bit certificate, if Forward Secrecy ciphers are used, the key exchange is only 1024 bit: https://www.ssllabs.com/ssltest/analyze.html?d=torproject.org EDIT:...
user1747's user avatar
  • 103
2 votes
1 answer
100 views

Why not update Tor browser to the latest NSS?

Firefox ESR uses an older version of NSS than the standard Firefox. Consequences include TLS 1.2 disabled by default, user can enable it, but it is buggier than the lastest version and it does not ...
user1747's user avatar
  • 103
2 votes
2 answers
149 views

As a Tor Browser Bundle user, how concerned should I be about the heartbleed SSL vulnerability?

I've been reading about the 'Heartbleed' SSL/TLS bug (CVE-2014-0160) and it is alarming. Are my communications still secure? Are there any steps I should do to protect my security?
Ivar's user avatar
  • 1,630
3 votes
1 answer
214 views

Does the GnuTLS bug (CVE-2014-0092) affect the Tor Browser Bundle or Tails?

There is a new major security vulnerability in the GnuTLS library (CVE-2014-0092) that undermines SSL on (some?) Linux platforms. What versions of the Tor Browser Bundler or Tails (if any) are ...
Ivar's user avatar
  • 1,630
6 votes
2 answers
1k views

How can I improve my SSL/TLS security?

I recently visited https://www.howsmyssl.com/ with TorBrowser Bundle 3.5 and the rating was alarming. In particular, the site informed me that the cipher SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA was ...
Ivar's user avatar
  • 1,630
1 vote
1 answer
93 views

How to determine if reported level of TLS overhead indicates a problem?

Tor periodically logs a diagnostic message with the percentage of TLS write overhead. How can one determine if the percentage reported is indicative of a problem with the associated tor relay?
pmocek's user avatar
  • 546
6 votes
1 answer
945 views

What is the "TLS write overhead" percentage reported in Tor log entries?

Tor sometimes logs entries similar to this: Sep 27 03:21:32.000 [notice] TLS write overhead: 13% What does this line mean? Is there a value where this indicates problems?
Jens Kubieziel's user avatar
  • 8,570