16
votes
Do all .onion addresses use SSL/TLS?
No, .onion sites are not using https/ssl by default. But the connection inside the Tor network is always encrypted, so it is not really necessary to use https for .onion sites. Exit nodes aren't used ...
- 2,209
11
votes
Accepted
How does Tor obfs4 protocol and PTs work?
The Tor Project Wiki has a good article covering this: A Childs Garden Of Pluggable Transports.
The pluggable transport is used as a proxy for tors traffic, it provides an extra layer of ...
- 10.8k
5
votes
Accepted
What encryption algorithms does Tor use?
What encryption algorithms does Tor use?
See the following sections of the Tor Protocol Specification:
0.2 Security parameters
0.3 Ciphers
Isn't RSA 1024 considered weak?
1024 hasn't been broken ...
- 3,105
5
votes
Accepted
How is data sent back from exit node to me?
This is a common question that everyone stumbles upon while understanding TOR Design. When the data is sent back to the user, each relay encrypts the data using the session key which was exchanged ...
- 225
5
votes
Accepted
Is Tor completely anonymous?
This setup may, or may not, be completely anonymous, depending on a whole bunch of factors, some extremely subtle. Adding a VPN to Tor basically never improves anonymity, though. Exactly how someone ...
- 552
4
votes
Accepted
Why do Tor hidden service operators bother with SSL/TLS encryption?
It has it's uses, of course! At least:
Integrity you know, that your server is responsible for cipher strength, and a potential malicious node in a chain will have some trouble-time due to that fact ...
- 5,401
4
votes
How to completely delete every single trace of Tor from Windows 7 Truecrypt folder
This is a tough question for any operating system. And it's especially tough for operating systems, such as Windows and OS X, that are largely closed-source.
It's arguable that Windows' logging ...
- 2,989
3
votes
Accepted
Using Tor Proxy through other aplications
Answer 0:
There is always a way to be monitored by your ISP, because your information (packets) goes through its physical infrastructure (usually fiber cable)
at least there is a way to know if you ...
- 141
2
votes
Multi-VPN hopping Advantages/Disadvantages over Tor
If strong anonymity is what you want, use Tor. Reaching the Tor network through a VPN does not increase privacy or anonymity. It merely shifts knowledge about Tor usage from your ISP (and relevant ...
- 2,989
2
votes
Why Tor node maintains TLS keys with every other Tor node?
If I understand your question right, you're wondering about the link protocol that relays use to talk to each other. This protocol ensures that relays establish exactly one connection to each other, ...
- 2,209
2
votes
How does data go through Tor
Every step is done in reverse when the data is sent back to you from the exit relay, using the same relays. The relay knows which connection some data it receives belongs to, so it can link the data ...
- 2,209
2
votes
Tor and encryption
If you are using an external client (such as an onion pi) and then connect to the internet over that client, then yes you can use any browser you want and your traffic will be encrypted and sent over ...
- 73
2
votes
Accepted
Are all tor exit nodes known?
There wouldn't really be any benefit to the attacker sniffing the exit traffic and then routing it over Tor again. Theoretically it would be possible. They can run an exit node, and configure their ...
- 260
2
votes
Sniff Tor onions address from a relay
I have worked on finding ALL Onion Addresses in TOR service and as I found, there is no clear way of finding all the Onions. Actually in the next generation of Onion Addresses, HSDirs can not see the ...
- 368
2
votes
Accepted
Encryption by EFS
If you create an encrypted folder and put Tor Browser inside of it:
Remote - You will gain no security advantage against a remote attacker: exploits will still work fine.
Local Offline - You will ...
- 10.8k
2
votes
Is all traffic routed through Tor when using TBB?
When running the Tor Browser, only the Tor Browser connects through the Tor network. Other applications are not affected and will connect in the same way they always do.
- 3,745
2
votes
Does all bridge users have the same encryption key?
Whenever your client makes a connection to a bridge or any other Tor relay it negotiates an individual key. So this key if different from a key which another client uses and also from a key which your ...
- 8,663
2
votes
HTTPS Everywhere and Tor
HTTPS Everywhere is already included in Tor Browser. Its button is next to the Firefox menu button.
Is the HTTPS not needed on the Tor Browser?
It is recommended to always use HTTPS whenever ...
- 138
2
votes
HTTPS Everywhere and Tor
Is the HTTPS not needed on the Tor Browser?
HTTPS Everywhere is included by default in Tor Browser
Does Tor encrypt one's data like the HTTPS Everywhere add-on?
Neither of these tools encrypt the ...
- 10.8k
2
votes
Accepted
What is the key blinding function used in the hidden service protocol v3?
I've messaged one of the tor developpers and he's been kind enough to answer. In the rend-spec-v3.txt document, the function is actually specified in appendix A2. And the "HSDirV3" flag ...
- 36
2
votes
Accepted
What prevents the first relay from decrypting the rest of the layers in the onion packet?
These "layers" in Tor are actually layers of encryption, where each relay only knows how to remove a single layer. As a client builds a circuit, the client performs a key exchange with each ...
- 2,628
2
votes
How does Tor connect to a server while hiding it's ip?
The general idea is that the client doesn't connect directly to the onion service. Instead, the client creates an anonymous circuit to a relay, the onion service creates its own anonymous circuit to ...
- 2,628
1
vote
Can the tor initial client to relay or bridge connection be MITM attacked?
Q 1 So I am assuming that this is unencrypted data. Is this correct?
There is no "data", this is a TCP handshake, you cannot send data until the 3 way handshake is completed. This is simply ...
- 10.8k
1
vote
Tor's encryption confusion and client to first node encryption
Does the server's response reach the client encrypted or unencrypted? Is the cycle exactly the same for the client's request as it is for the server's response?
It reaches the client encrypted (in ...
- 10.8k
1
vote
Is there any vulnerabilities when using socks with tails?
It's only on the local loopback interface, the unencrypted connection is made purely locally. It traverses any local network resources encrypted. Note however that anything you send into the Tor ...
- 10.8k
1
vote
Sniff Tor onions address from a relay
Yes, you even don't need to dump it, but become a *HSDir** flagged relay, I.e. a hidden services directory. However, there's not much use of it,because you will see a rendezvous points and maybe some ...
- 5,401
1
vote
Accepted
Tor Encryption Standards
The two keys are not for substituting each other, but to make "an authenticating pair", unique for every relay. 1024-bit-only RSA is an anachronism, I hope higher lengths will be added ASAP in the ...
- 5,401
1
vote
TOR and Orbot, possibility to add in dynamic AES encryption structure before data is send out?
No matter how many encryption layers you add, the exit node must always send the data to the final destination (web server) in the same form as your Tor client received it from your application (...
- 3,745
Only top scored, non community-wiki answers of a minimum length are eligible