4

If a user connects to the clearnet webservice with Tor - then the webserver sees the exit node used by the user. If the user connects to the webservice through the .onion domain - the webserver sees the ip as 127.0.0.1 (localhost), and have no idea where the traffic comes from. The main difference is that if you connect through the onion domain everything ...


3

The user will have to configure their browser to use the Tor on your VPN server as proxy with remote hostname resolution. Otherwise they can not browse hidden services.


1

It is as safe as using any other browser and internet connection, granted that you live in a country that has not banned tor traffic in general. If you live in a less strict country, say the USA, you can perfectly fine use tor for regular sites like reddit. Do note on the privacy part however: if you visit regular sites in a systematic order, or log in to ...


1

Generally yes, any requests to websites you visit in the Tor Browser whether it’s an onion address or a regular address will be routed through the Tor network. This means that any website you visit will not learn your IP address. Even with its new privacy features, Firefox does not hide your IP address.


1

ABE and ClearClick are part of the NoScript add-on. ClearClick Clickjacking is a method of tricking you into clicking something you probably didn't want to click on. There's various ways to clickjack, but most of them use iFrames or JavaScript to partially cover a link or button, so you accidentally click on the "bad" link instead of what you thought you ...


1

An answer is simple: use a second HS! You're using a second HS as a proxy or OpenVPN server for the very deep HS of yours. And no problem will be regarding the privacy/location/deanonymization of your first HS


1

You will probably need to create a transparent proxy (which uses socks to forward traffic via Tor), and have traffic routed through that. You will also need to do something funky with DNS, to stop clearnet DNS traffic leaking out of your VPN server. So it's technically possible, but difficult. Some other systems exist which do this, for example http://...


Only top voted, non community-wiki answers of a minimum length are eligible