17
votes
"This is a SOCKS Proxy, Not An HTTP Proxy"
Tor provides a SOCKS proxy by default.
Whatever you've configured to use Tor is trying to use it as an HTTP proxy which is a different kind of proxy protocol.
Tor (at least as of 0.3.2.x) can ...
- 11k
9
votes
"This is a SOCKS Proxy, Not An HTTP Proxy"
As @cacahuatl said you can use that switch, if you want it to be permanent go to /etc/tor/torrc (This is the path for tor config file in Ubuntu and Debian), open it with your favorite text editor and ...
3
votes
Accepted
Why doesn't Tor browser block HTTP by default?
It's not enabled by default because it would block a significant fraction of the Internet for users. Blocking HTTP-only traffic will likely come in the future once Tor Browser is using a version of ...
- 3,142
2
votes
Tor connecting to HTTP
This can have several reasons:
Tor Browser comes with HTTPS Everywhere. This addon has rules for several sites to connect via HTTPS. At https://atlas.eff.org/index.html?tubes you can see all sites ...
- 8,570
2
votes
SSL certificate for Tor
At the moment the only way to get a trusted SSL certificate for a .onion domain is to buy an EV (extended validation) certificate.
For more info see: https://www.digicert.com/blog/ordering-a-onion-...
- 446
2
votes
SSL Requests from a different IP than Non SSL requests
Your SSL Requests come from a different IP than your Non SSL requests. Your Proxy seems not to support SSL, which is dangerous as the proxy can read and modify all your traffic.
Looks to me like ...
- 1,342
2
votes
HTTPS Everywhere and Tor
Is the HTTPS not needed on the Tor Browser?
HTTPS Everywhere is included by default in Tor Browser
Does Tor encrypt one's data like the HTTPS Everywhere add-on?
Neither of these tools encrypt the ...
- 11k
2
votes
HTTPS Everywhere and Tor
HTTPS Everywhere is already included in Tor Browser. Its button is next to the Firefox menu button.
Is the HTTPS not needed on the Tor Browser?
It is recommended to always use HTTPS whenever ...
- 138
2
votes
HTTPS, HTTP Headers, Privacy and Tor
Are the HTTPS headers encrypted?
Yes, in HTTPS the headers and the requested resource are part of the "content" that is encrypted.
I am browsing with a normal browser but through an HTTPS page, ...
- 11k
2
votes
Do tor exit nodes see the URL you're connecting to?
The Tor-Network works trough Onion Routing which encrypts your Message with your Target Address, so no one can read the original message on the way to the Exit Relay.
But since the Exit Relay is the ...
- 31
2
votes
Are contents of a hidden service secure if the service is HTTP?
I'll tackle the easy question first:
is it more secure to use HTTPS on a hidden service than pure-HTTP?
https provides one thing for onion services that http does not. It provides proof that the ...
- 2,284
2
votes
Accepted
Connecting to Tor Directory Authority via Proxy Server (Protocol Question)
Tor processes (client proxies, relays, bridges, etc) do not communicate over HTTP. They use a custom link protocol within a TLS connection. You must use a tor proxy (or generally, a proxy that speaks ...
- 3,142
1
vote
Accepted
Security vulnerabilities for http login of self-hosted nextcloud server over tor?
Can malicious actors, and/or malicous tor-node operators directly read the Nextcloud password and username that I submit over http://some_onion_domain.onion, or do they require an additional ...
- 3,142
1
vote
Accepted
Block http traffic
To prevent the server from being accessible from the network, you need to bind your webserver to localhost rather than to all interfaces. So for example in your apache config, instead of:
Listen 80
...
- 3,142
1
vote
HTTPS Everywhere doesn't work all the time
HTTPS Everywhere does not block all non-https requests since it would block a significant fraction of the Internet for users, hurting usability. Instead, it uses a ruleset to only modify requests for ...
- 3,142
1
vote
Tor and Onion Rouitring work whilst SSL is out on my network
This question has a broader scope than Tor.SE has. Maybe InfoSec.SE is a better place to ask.
Between 6 and 8 pm I am unable to make any ssl connections through my router
There could be numerous ...
- 725
1
vote
Accepted
How sending form data over HTTPS using TOR works
[...] the HTTPS session is created between the exit node [...] and the target server [...]
that's the point where your thinking/assumption gets wrong.
Tor does not change the principle how HTTP, ...
- 702
1
vote
Fetching JSON via Tor
If you have VM setup with all network traffic routed through tor then you do not need to run torsocks.
- 266
1
vote
Set a tor server behind http proxy
First of all that isn't how you make Tor use an HTTP proxy.
HTTPProxy host[:port]
Tor will make all its directory requests through this host:port (or host:80 if port is not specified), rather than ...
- 11k
1
vote
Accepted
TBB Sec Error Unknown Issuer (Comodo CA)
This is likely unrelated to Tor Browser (except that Tor Browser is being more strict about TLS being properly configured on the server side, it seems...), the server itself is at fault, the ...
- 11k
1
vote
Proxy settings issue/HTTPS issue - warning message
This sounds like a false negative.
ip-check.info (or any similar site) doesn't know "your own IP", it can detect that a different IP was used and assume it was a "leak", but this could just mean that ...
- 11k
1
vote
Orbot, SSL Error 3 - Why?
In such cases proxies usually performing at least one of the bad tricks like that:
MitM attack by intruding into SSL/TLS connecions. Tor will give you an error because for directories it has ...
- 6,265
Only top scored, non community-wiki answers of a minimum length are eligible