We’re rewarding the question askers & reputations are being recalculated! Read more.

Questions tagged [tls]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
14 views

problem while connecting manually vs automatically

I am on ubuntu 16.04. when I use tor browser, it connects without any problem. At the same time, when I try to use tor on the command line, it can't connect. Even I used the configuration file of the ...
2
votes
0answers
179 views

Detailed Understanding of Tor's connection establishment

I am really new to Onion Routing and Tor and I have just started reading about the topic on Wikipedia and the Tor Protocol Specification. Most of the concepts are explained very well but I have ...
1
vote
0answers
86 views

RSA keys explanations

I am currently reading the Tor Spec (and other Tor-related technical documents) and have some questions about RSA keys. I can't understand why the "connection key" is used to establish the TLS ...
0
votes
1answer
102 views

What is mean “www.wiaakidaayd.com” in wireshark when i establish tor connection using Tor Browser?

I am just get started in wireshark and tor, so please don't laugh) When i establish connection to tor, using tor browser i saw in wireshark some unclear packet. After SYN (9) -> SYN,ACK (10) -> ACK ...
1
vote
1answer
244 views

Latest TBB never accept self-sign certificate

about:preferences#advanced -> Certificates -> ViewCert In Firefox, I can add my own self-sign cert to browser. However, in latest TBB(6.0+) I can't add certificate. This is annoying because I ...
3
votes
0answers
233 views

Unable to connect to Tor network using TLS [duplicate]

I'm behind a corporate proxy, Tor always worked fine (using bridges) until few days ago, it seems that now the proxy only accepts TLS connections (no SSLv2/v3); Is there a way to solve this issue? I ...
2
votes
1answer
63 views

Why not update Tor browser to the latest NSS?

Firefox ESR uses an older version of NSS than the standard Firefox. Consequences include TLS 1.2 disabled by default, user can enable it, but it is buggier than the lastest version and it does not ...
3
votes
1answer
224 views

Tor TLS cipher suite negotiation and fingerprint defense

In reading this bug I can see that, in the past, Tor has been fingerprinted based on the cipher suites negotiated in the initial TLS handshake. Originally it looks like a copy of the cipher suites in ...
2
votes
2answers
57 views

Why Tor node maintains TLS keys with every other Tor node?

I read that Tor proxy maintains key with each Tor node for encryption. Then, why does a Tor node maintains TLS keys with other Tor nodes?
1
vote
0answers
34 views

When Forward Secrecy ciphers are used, the Torproject website uses 1024 bit key exchange; Can this be improved? [closed]

While the website of Torproject uses a 2048 bit certificate, if Forward Secrecy ciphers are used, the key exchange is only 1024 bit: https://www.ssllabs.com/ssltest/analyze.html?d=torproject.org EDIT:...
2
votes
2answers
135 views

As a Tor Browser Bundle user, how concerned should I be about the heartbleed SSL vulnerability?

I've been reading about the 'Heartbleed' SSL/TLS bug (CVE-2014-0160) and it is alarming. Are my communications still secure? Are there any steps I should do to protect my security?
3
votes
1answer
191 views

Does the GnuTLS bug (CVE-2014-0092) affect the Tor Browser Bundle or Tails?

There is a new major security vulnerability in the GnuTLS library (CVE-2014-0092) that undermines SSL on (some?) Linux platforms. What versions of the Tor Browser Bundler or Tails (if any) are ...
6
votes
2answers
1k views

How can I improve my SSL/TLS security?

I recently visited https://www.howsmyssl.com/ with TorBrowser Bundle 3.5 and the rating was alarming. In particular, the site informed me that the cipher SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA was ...
1
vote
1answer
71 views

How to determine if reported level of TLS overhead indicates a problem?

Tor periodically logs a diagnostic message with the percentage of TLS write overhead. How can one determine if the percentage reported is indicative of a problem with the associated tor relay?
7
votes
1answer
801 views

What is the “TLS write overhead” percentage reported in Tor log entries?

Tor sometimes logs entries similar to this: Sep 27 03:21:32.000 [notice] TLS write overhead: 13% What does this line mean? Is there a value where this indicates problems?