16 votes

Do all .onion addresses use SSL/TLS?

No, .onion sites are not using https/ssl by default. But the connection inside the Tor network is always encrypted, so it is not really necessary to use https for .onion sites. Exit nodes aren't used ...
user avatar
  • 2,209
11 votes
Accepted

How does Tor obfs4 protocol and PTs work?

The Tor Project Wiki has a good article covering this: A Childs Garden Of Pluggable Transports. The pluggable transport is used as a proxy for tors traffic, it provides an extra layer of ...
user avatar
  • 10.8k
5 votes
Accepted

What encryption algorithms does Tor use?

What encryption algorithms does Tor use? See the following sections of the Tor Protocol Specification: 0.2 Security parameters 0.3 Ciphers Isn't RSA 1024 considered weak? 1024 hasn't been broken ...
user avatar
5 votes
Accepted

How is data sent back from exit node to me?

This is a common question that everyone stumbles upon while understanding TOR Design. When the data is sent back to the user, each relay encrypts the data using the session key which was exchanged ...
user avatar
  • 225
5 votes
Accepted

Is Tor completely anonymous?

This setup may, or may not, be completely anonymous, depending on a whole bunch of factors, some extremely subtle. Adding a VPN to Tor basically never improves anonymity, though. Exactly how someone ...
user avatar
  • 552
4 votes
Accepted

Why do Tor hidden service operators bother with SSL/TLS encryption?

It has it's uses, of course! At least: Integrity you know, that your server is responsible for cipher strength, and a potential malicious node in a chain will have some trouble-time due to that fact ...
user avatar
  • 5,401
4 votes

How to completely delete every single trace of Tor from Windows 7 Truecrypt folder

This is a tough question for any operating system. And it's especially tough for operating systems, such as Windows and OS X, that are largely closed-source. It's arguable that Windows' logging ...
user avatar
  • 2,989
3 votes
Accepted

Using Tor Proxy through other aplications

Answer 0: There is always a way to be monitored by your ISP, because your information (packets) goes through its physical infrastructure (usually fiber cable) at least there is a way to know if you ...
user avatar
  • 141
2 votes

Multi-VPN hopping Advantages/Disadvantages over Tor

If strong anonymity is what you want, use Tor. Reaching the Tor network through a VPN does not increase privacy or anonymity. It merely shifts knowledge about Tor usage from your ISP (and relevant ...
user avatar
  • 2,989
2 votes

Why Tor node maintains TLS keys with every other Tor node?

If I understand your question right, you're wondering about the link protocol that relays use to talk to each other. This protocol ensures that relays establish exactly one connection to each other, ...
user avatar
  • 2,209
2 votes

How does data go through Tor

Every step is done in reverse when the data is sent back to you from the exit relay, using the same relays. The relay knows which connection some data it receives belongs to, so it can link the data ...
user avatar
  • 2,209
2 votes

Tor and encryption

If you are using an external client (such as an onion pi) and then connect to the internet over that client, then yes you can use any browser you want and your traffic will be encrypted and sent over ...
user avatar
2 votes
Accepted

Are all tor exit nodes known?

There wouldn't really be any benefit to the attacker sniffing the exit traffic and then routing it over Tor again. Theoretically it would be possible. They can run an exit node, and configure their ...
user avatar
  • 260
2 votes

Sniff Tor onions address from a relay

I have worked on finding ALL Onion Addresses in TOR service and as I found, there is no clear way of finding all the Onions. Actually in the next generation of Onion Addresses, HSDirs can not see the ...
user avatar
  • 368
2 votes
Accepted

Encryption by EFS

If you create an encrypted folder and put Tor Browser inside of it: Remote - You will gain no security advantage against a remote attacker: exploits will still work fine. Local Offline - You will ...
user avatar
  • 10.8k
2 votes

Is all traffic routed through Tor when using TBB?

When running the Tor Browser, only the Tor Browser connects through the Tor network. Other applications are not affected and will connect in the same way they always do.
user avatar
  • 3,745
2 votes

Does all bridge users have the same encryption key?

Whenever your client makes a connection to a bridge or any other Tor relay it negotiates an individual key. So this key if different from a key which another client uses and also from a key which your ...
user avatar
  • 8,663
2 votes

HTTPS Everywhere and Tor

HTTPS Everywhere is already included in Tor Browser. Its button is next to the Firefox menu button. Is the HTTPS not needed on the Tor Browser? It is recommended to always use HTTPS whenever ...
user avatar
  • 138
2 votes

HTTPS Everywhere and Tor

Is the HTTPS not needed on the Tor Browser? HTTPS Everywhere is included by default in Tor Browser Does Tor encrypt one's data like the HTTPS Everywhere add-on? Neither of these tools encrypt the ...
user avatar
  • 10.8k
2 votes
Accepted

What is the key blinding function used in the hidden service protocol v3?

I've messaged one of the tor developpers and he's been kind enough to answer. In the rend-spec-v3.txt document, the function is actually specified in appendix A2. And the "HSDirV3" flag ...
user avatar
2 votes
Accepted

What prevents the first relay from decrypting the rest of the layers in the onion packet?

These "layers" in Tor are actually layers of encryption, where each relay only knows how to remove a single layer. As a client builds a circuit, the client performs a key exchange with each ...
user avatar
  • 2,628
2 votes

How does Tor connect to a server while hiding it's ip?

The general idea is that the client doesn't connect directly to the onion service. Instead, the client creates an anonymous circuit to a relay, the onion service creates its own anonymous circuit to ...
user avatar
  • 2,628
1 vote

Can the tor initial client to relay or bridge connection be MITM attacked?

Q 1 So I am assuming that this is unencrypted data. Is this correct? There is no "data", this is a TCP handshake, you cannot send data until the 3 way handshake is completed. This is simply ...
user avatar
  • 10.8k
1 vote

Tor's encryption confusion and client to first node encryption

Does the server's response reach the client encrypted or unencrypted? Is the cycle exactly the same for the client's request as it is for the server's response? It reaches the client encrypted (in ...
user avatar
  • 10.8k
1 vote

Is there any vulnerabilities when using socks with tails?

It's only on the local loopback interface, the unencrypted connection is made purely locally. It traverses any local network resources encrypted. Note however that anything you send into the Tor ...
user avatar
  • 10.8k
1 vote

Sniff Tor onions address from a relay

Yes, you even don't need to dump it, but become a *HSDir** flagged relay, I.e. a hidden services directory. However, there's not much use of it,because you will see a rendezvous points and maybe some ...
user avatar
  • 5,401
1 vote
Accepted

Tor Encryption Standards

The two keys are not for substituting each other, but to make "an authenticating pair", unique for every relay. 1024-bit-only RSA is an anachronism, I hope higher lengths will be added ASAP in the ...
user avatar
  • 5,401
1 vote

TOR and Orbot, possibility to add in dynamic AES encryption structure before data is send out?

No matter how many encryption layers you add, the exit node must always send the data to the final destination (web server) in the same form as your Tor client received it from your application (...
user avatar
  • 3,745

Only top scored, non community-wiki answers of a minimum length are eligible