Hacker News new | ask | show | jobs
by dfc 4753 days ago
No, I don't hope. If relay operators can "peel back the layers of my onions" and see the traffic the entire security model is out the window.

Edit: I just saw your restatement of your question. Check out the bandwidth management features and set your relay to only allow exit traffic to port 443. More info on the bandwidth management can be found here:

https://trac.torproject.org/projects/tor/wiki/doc/TorFAQ#Wha...

2 comments

The security model of Tor allows the exit nodes to see all the traffic in 'plaintext' (indeed, the design of Tor requires it). What the security model requires is that the exit nodes not be able to identify who sent the packets originally.

I put "plaintext" in quotes because they can only see what you want to send to the server, which could be encrypted outside of the context of Tor.

Although I think it is illegal to spy on the data you pass as an exit node, a point that is often not said is that by the design of Tor, you are showing some random person the content of all of your requests, which opens up a whole new attack vector for eavesdropping and man-in-the-middle attacks.

Thank you. Your suggestion is very helpful. I'll have a gander at that link.