3 ms·
"which tunnels VPN over HTTPS bypassing restrictive firewalls," That's one of the reasons I recommend HTTPS-based approaches over things like Tor for anonymity
by nickpsecurity 8y ago
"which tunnels VPN over HTTPS bypassing restrictive firewalls,"
That's one of the reasons I recommend HTTPS-based approaches over things like Tor for anonymity. Makes things look like all the bland, harmless traffic out there. Smart move. :)
- wp381640 8y agoTor supports pluggable transports, one of the most popular of which is meek - which makes your traffic look like Google or Azure CDN traffic over HTTPS[0] Also Tor circuits are also just TLS[1] [0] https://trac.torproject.org/projects/tor/wiki/doc/meek https://trac.torproject.org/projects/tor/wiki/doc/meek [1] https://wiki.wireshark.org/Tor https://wiki.wireshark.org/Tor
- nickpsecurity 8y agoThanks for telling me about meek. I'll warn this might not block visibility at least for domestic TLA's. If they record metadata, they can just work backwards from exit nodes or known relays to whoever is connecting to them. That would map out most likely users of Tor. Then, they can apply whatever passive or active attacks they have. Most probably aren't running OpenBSD, HardenedBSD, QubesOS, etc. ;) Still good for the many, many, other threats out there.