4
votes
Accepted
Adding Clinet SSL to HIdden Service
It's exactly the same excepting that no CA will sign your CSR (it'll be a self-signed certificate) and it's mostly superfluous because .onion is already providing end-to-end authenticate encryption.
...
- 10.9k
2
votes
Possibility with malicious endnode, SSL Strip?
Tor only protects the traffic up to the exit node.
If there is some man in the middle at the exit node or after the exit node then he can intercept and modify the traffic. Since https is end-to-end ...
- 151
2
votes
SSL certificate for Tor
At the moment the only way to get a trusted SSL certificate for a .onion domain is to buy an EV (extended validation) certificate.
For more info see: https://www.digicert.com/blog/ordering-a-onion-...
- 446
2
votes
Accepted
Socks version 22 not recognized. (Tor is not an http proxy.)
You're not trying to speak SOCKS, the SOCKS port only speaks the SOCKS protocol.
Decimal 22 is hexadecimal 0x16, which is the initial byte of a TLS connection. Tor's SOCKS port does not speak TLS. ...
- 10.9k
2
votes
TLS and OpenSSL errors
Due to regression introduced in OpenSSL 1.1.1a. Openssl says fix in next openssl release:
https://github.com/openssl/openssl/issues/7712
Until then, workaround for coping with OpenSSL 1.1.1a added to ...
- 121
2
votes
Do all .onion addresses use SSL/TLS?
Do not mess up using Tor as a transport layer, where encryption is used for your privacy protection primarily, and the HTTP access protection by using SSL(aka HTTPS ). Onion sites may use HTTPS freely ...
- 5,900
1
vote
Accepted
Tor Browser: "Connection not secure" no matter what site
Known issue: https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40328
Version of Tor Browser is currently latest - 0.3.3-1.
That's either severely outdated or not the Tor Browser ...
- 326
1
vote
Accepted
TLS and OpenSSL errors
I have the same error since upgrade from openssl to version openssl-1.1.1.a-1 on linux arch.
Downgrading openssl to version openssl-1.1.1-1 solved the problem.
- 26
1
vote
Tor Browser import SSL certificate
The OP gave the answer in the comments. I'll add the answer for completeness:
Tor Browser has set security.nocertdb in about:config to true. This means that the intermediate certificate store is only ...
- 8,561
1
vote
SSL, Mixed Content
Yes for my browser, those two configuration is disabled. I am sure that the rest also have the same settings too unless they tweaked it.
Why isn't this enable by default?
I find Tor lead ...
- 324
1
vote
Possibility with malicious endnode, SSL Strip?
Tor does not care about the traffic that passes over it. Anyone running skiddy/"whitehat" tools on the exit traffic can tamper with it in any way. However these tools cannot break TLS.
The exit can ...
- 10.9k
1
vote
Is Tor still safe to use if my boss intercepts HTTPS?
Define safe. If you're worried about your boss being able to see what you're doing in Tor, then yes, Tor will be safe.
Your Tor traffic will still be intercepted by your boss, but since the ...
- 1,239
1
vote
Attempting to undertand Tor and it's relationship with SSL
Tor uses SSL to secure point-to-point connections between peers. The multi-hop onion routing protocol (with its separate layered encryption) is implemented over these individual links. Thus it was ...
- 177
1
vote
Attempting to undertand Tor and it's relationship with SSL
But if this is the case I don't see how SSL is related to Tor, since
they seemingly function on a different layer.
If you're doing some preliminary reading about networking, you're presumably ...
- 3,135
1
vote
Attempting to undertand Tor and it's relationship with SSL
The SSL and Tor are not parts of one problem. But the reason of meeting them together very ofthen lays within the network security area itself. Let me explain it - maybe abit over-deep-digging, but ...
- 5,900
1
vote
Tor connection from 1st to 2nd computer, then from 2nd computer, a 2nd Tor connection to browse web (for increased untraceability)
Your second computer must have two separate ISP's with different IP addresses, and it should be no problem at all : you will use two virtual machines, one for "using net securely", you will connect to ...
- 5,900
1
vote
Tor connection from 1st to 2nd computer, then from 2nd computer, a 2nd Tor connection to browse web (for increased untraceability)
Don't do that. Try Tor over VPN or JAP or (chained) proxies or something else.
Is running Tor over Tor dangerous?
- 725
1
vote
Accepted
Manually check the SSL cert to avoid MITM on https?
You can see the certificate information and export the cert:
Click the lock,
More Information,
Security,
View Certificate,
Details,
Export.
You don't need to download two certificates and compare ...
- 3,665
Only top scored, non community-wiki answers of a minimum length are eligible