16

No, .onion sites are not using https/ssl by default. But the connection inside the Tor network is always encrypted, so it is not really necessary to use https for .onion sites. Exit nodes aren't used at all with hidden services, because the connection stays inside the Tor network until the hidden service is reached.


13

You can extract the list from Hidden Service lists and search engines which are available at OnionDir - Deep Web Link Directory. Or you can try Ahmia.fi site which is gathering .onion addresses using various methods by crawling the hidden services, downloading visited page data from the Tor2web nodes, and users can use an HTML form to add new addresses. ...


12

There are few available Tor2web network gateways: *.tor2web.org, *.tor2web.fi (managed by Ahmia - Onion Search Engine), *.tor2web.blutmagie.de (managed by O.Selke with no block), *.onion.sh (managed by my unknown friend: “hey anon!”). Source: Tor2web: exposing the darknet on Internet (PDF) How it works Whenever you see a URL like http://xxx.onion/, that'...


9

Some people like http://onion.direct . However I am a fan of onion.link. I do know at least in terms of size of GOOG index, the results come out to: onion.direct | 21k onion.cab | 232k onion.link | 1060k Both onion.link as well as onion.cab do caching. AFAIK the other various t2w gateways do not.


6

Yes it can be scanned. People can scan for services as they do on clearnet, by routing their scanner through tor pointing it at the domain. A onion domain is not to be considered a secret. Im not sure about your vpn question, but you can look at this answer here for some hints on how to make the domain private: https://tor.stackexchange.com/a/3762/112


6

The creation of the hostname is described in rend-spec, the Tor Rendezvous Specification. You are 100% correct: There is no central domain name provider on the Tor network. There is no central anything provider on the Tor network. How it works: Tor generates two keys for every service on the Tor network. Tor generates a private "secret" key, and a ...


6

Also to mention onion.cab which is 5 times faster than browsing via the tor-client, because of its static-files-caching.


6

All the nodes after the initial circuit starter are doing rougly the same thing : unwrapping the message by their-and-circuit-starter very own pre-negotiated key ant takig a look at the next layer. After this point four scenario's are in action : The node is an intermediate, it sees "an envelope with address" in tor network and just passes it by to the ...


6

You build a TLS connection to your guard. Over that TLS connection you perform a key exchange using the OR protocol. Now you and the first guard compute two keys from the shared secret the key exchange netted you, a forward and a reverse key. Now you use the first OR to perform the key exchange with another OR, and again both can compute a shared forward ...


6

Actually, there is an onion address for Tor: http://expyuzz4wqqyqhjn.onion/ The Tor Project runs quite a few onion addresses: https://onion.torproject.org/ I can't confirm if the Tor Browser uses this onion address for updating though.


6

How-to: Quoting hiddenwiki: Getting a .onion domain is not only free (they are automatically generated by Tor), but it is simple once you have completed the basic server installation procedure. If you are not familiar with servers find a friend or a tech whiz who can walk you through it. As with everything computer related, it is fairly difficult if you ...


5

Tor and I2P have a number of similarities. Tor however has a big benefit when you are leaving the Tor network. I2P's exit system is basically a really limited set of proxies, which makes attacking you by analyzing the traffic at the exit easier. It's a game of numbers. There are very few exit nodes (they call them outproxies sometimes) compared to Tor. ...


5

As far as I can see it from the original onion routing patent, OR uses long term public keys for encrypting messages for onion routers and there is no description of a key exchange. Tor can be seen as the second generation onion routing (and is intended to have no patent) and besides adding much more features (adding perfect forward secrecy, congestion ...


5

The path spec doesn't list choosing your own node as one of its constraints on exit nodes: 2.2. Path selection and constraints We choose the path for each new circuit before we build it. We choose the exit node first, followed by the other nodes in the circuit. All paths we generate obey the following constraints: We do not choose the same router ...


5

Harry71 has a list of onion-hosts which provide a public web site, which you can get in machine readable format. http://skunksworkedp2cg.onion/sites.txt It gets updated fairly often.


5

Making a movie available via BitTorrent is fine. But using Tor, either for seeding or recommended for downloading, is unwise. It's hard to properly configure torrent clients to use Tor without leaking, so recommending that people download via Tor would put them at risk. And even if torrent clients are properly configured, they would be stealing bandwidth ...


5

The list of all Tor relays and whether they are exits needs to be public, because Tor clients use this information to build circuits. There is no point in trying to keep this information 'secret' because anyone could obtain the list by running a client and then publish it. For operators of exit relays, the fact that they are publicly advertised as such ...


5

The difference between .onion URLs and normal URLs, is that the normal URL is simply a "human readable pointer" points to a network location... on the other hand, a .onion URL is actually the only address you should be accessing it from. The secure part about Tor is that it masks the server IPs as well. A government or "knowledgable individual" can tell ...


4

Look at http://2vlqpcqpjlhmd5r2.onion.lu/ it is a web-bridge to .onion sites, that bridges to a Freenet to Tor bridge. EDIT: Here’s a currently working bridge, pointing to a site hosted in Freenet: https://freenet7cul5qsz6.onion.cab/freenet:USK@s9sxY2cTJWHKRsTuBTkjrXW4HfzrdUlwFqft1mzV0Gs,2E4DOMYy-~zOdp8-5OQH2IcmLfey0AOIkms-73Mx2tI,AQACAAE/freenet-funding/42/...


4

JonDo now accepts Bitcoins for premium accounts... Anonymous payments for JonDonym premium accounts are possible by Paysafecard (Euro, Dollar) and by snake mail letter too. See "Available billing methods" at https://shop.anonymous-proxy-servers.net/bin/payment For better anonymity, one can sign up using JonDonym free services, but Tor works too. Some ...


4

JonDonym and Tor differ greatly in both design and implementation. First, JonDonym is a mix network, whereas Tor is an onion-routing network. Quoting Syverson (2009) Why I'm not an Entropist: Mix networks get their security from the mixing done by their component mixes, and may or may not use route unpredictability to enhance security. Onion routing ...


4

Tor: The Second-Generation Onion Router explains it pretty well in section 4.2 Circuits and Streams, subsection Relay cells: Once Alice has established the circuit (so she shares keys with each OR on the circuit), she can send relay cells. Upon receiving a relay cell, an OR looks up the corresponding circuit, and decrypts the relay header and payload with ...


4

Ok, I figured this out. For some reason the custom onion address I made with Shallot was no longer working. I made a new hidden service and got rid of the existing one, restarted Tor, and voila! I'm not sure why this happened, but this solved both hidden services that had stopped working.


4

ping, assuming you're talking about the *nix command, is ICMP. Tor is exclusively TCP in the requests carried across the network. You cannot "ping" an onion. If you want to know if an onion is online, you can try to connect to it. A more heuristic method might be to fetch the onion's descriptor and see when it was published but that doesn't mean it's online,...


4

No, correctly-configured Tor hidden services are not accessible by direct IP connection. When setting up a hidden service, you set up your web server to only listen to traffic from the local machine, which will come from the Tor client: You need to configure your web server so it doesn't give away any information about you, your computer, or your location....


4

The "Onion Proxy" is a name for a Tor client, it is the entire client process. The SOCKS interface is just a way for a client to utilise the onion proxy. The SOCKS server is provided by the Tor process itself, when it receives a request it attaches the connection to an existing or new Tor circuit. SOCKS is necessary because applications more commonly speak ...


Only top voted, non community-wiki answers of a minimum length are eligible