News for hackers. Stuff that matters.

A comment on The Research Pirates of the Dark Web. Parent comment

Re:The Research Pirates of the Dark Web by captainmuon on Wednesday February 10, 2016 @11:50AM (#11074026)
It's not redundant; if someone sets up a malicious exit node they can view all your traffic, unless it is encrypted e.g. by SSL.

Of course for this kind of site that is not so important, but you shouldn't use any kind of site where you log in or enter sensitive information over Tor without HTTPS.

[ Parent | on HN ]
Re:The Research Pirates of the Dark Web by duskwuff on Wednesday February 10, 2016 @11:59AM (#11074098)
Traffic to .onion URLs is terminated within the Tor network. It doesn't pass through exit nodes.

HTTPS is actually a bit redundant for .onion URLs, as the hostname is a representation of the host's public key.

[ Parent | on HN ]
Re:The Research Pirates of the Dark Web by torthrowappp on Wednesday February 10, 2016 @12:36PM (#11074377)
It's fully redundant for .onion sites. Traffic destined for them never goes through exit nodes. It is only ever encrypted in a way that is readable only by the specific .onion destination.
[ Parent | on HN ]