2

Short: it does not send a command. It creates new connection to SocksPort, using different credentials, and sends new requests to domain through it. Details: Tor do isolates streams to different domains through different circuits. I don't know why exactly, but TBB tries to harden isolation by // __tor.isolateCircuitsByDomain()__. // For every HTTPChannel, ...


1

The method you mention of preventing traffic correlation attacks is generally called cover traffic. Sometimes it also makes sense to reorder the traffic as well, which is a network design often called mix networks or Chaum mixes. These techniques generally have the downsides of increasing latency and decreasing network capacity, so you need to be careful ...


Only top voted, non community-wiki answers of a minimum length are eligible