4 ms·
Tor hidden servers have changed recently so this may be a bit out of date, but the client (at the Twitter user end) has to choose all the relays between itself
by sp332 5y ago
Tor hidden servers have changed recently so this may be a bit out of date, but the client (at the Twitter user end) has to choose all the relays between itself and the endpoint. The server (Twitter) is also hidden here, so the client cannot make a path all the way to it, the way it could for a normal website. So Twitter publishes the address of a trusted relay instead. The client makes a path to the relay, and the relay forwards the request on to the hidden server.
- LMYahooTFY 5y agoIsn't determining the full path in Tor for routing to it's .onion sort of defeating the purpose? Can the client request this level of specificity?
- sp332 5y agoOnly the trusted relay in the middle knows that half of the path. Sorry if that wasn't clear. And again, this was a hack on the original protocol that had some security issues. The implementation of hidden servers was recently updated and I don't know exactly what changed.
- Bombthecat 5y agoBut... Cant you noch the relay?
- sp332 5y agoNoch?
- Bombthecat 5y agoBlock, damn, autocorrect :)
- wolverine876 5y agoThank you. Why do some relays need to be public Internet hosts (if I understood correctly what I saw) instead of using all Tor hosts as relays? Sorry if the answer is somehow implicit in what you already posted.
- sp332 5y agohttps://www.jamieweb.net/blog/forwarding-tor-hidden-services-to-another-server-across-the-internet/#why-can-t-you-natively-forward-hidden-service-across-over-the-internet https://www.jamieweb.net/blog/forwarding-tor-hidden-services...
- wolverine876 5y agoThanks for all your help and I understand if I've exhausted the efforts of free HN technical help! I read the link and while I learned more about Tor, the article seems to describe how to secure Tor traffic that is forwarded to regular Internet hosts, for example if someone using a Tor client visited ycombinator.com. My question is, if you use a Tor client to visit twitterhpgjerufcvrmzerg2novpipy42rk3anvb5b7np4zggm4rwaqd.onion, why is part of the route through regular Internet hosts (afaict) and what are the implications of that? The article shows what I am describing in this screenshot; the blacked out parts next to "Portugal", "Germany", and "United States" are IP addresses: https://www.jamieweb.net/blog/forwarding-tor-hidden-services-to-another-server-across-the-internet/tor-browser-80-reverse-proxy-jamieweb.png https://www.jamieweb.net/blog/forwarding-tor-hidden-services... (Also, my original post had it backward: the traffic goes through regular Internet hosts and then through Tor relays, not vice versa) Again, maybe I am just missing the implications of what you are saying.
- sp332 5y agoYeah I was hoping someone would fill the in the details lol.
- I_Byte 5y agoI think I cleared up what was left unmentioned here https://news.ycombinator.com/item?id=30620496 https://news.ycombinator.com/item?id=30620496 I like your initial explanation sp332, I thought it was good so I elaborated on it.