3 ms·
Probably some, but the Tor network is designed to be robust to that. The community does a lot of active monitoring to kick out misbehaving relays. "Misbehaving
by sporksmith 4y ago
Probably some, but the Tor network is designed to be robust to that.
The community does a lot of active monitoring to kick out misbehaving relays. "Misbehaving" includes running multiple relays without correctly setting the family attribute to identify them as being run by a single entity.
The main danger of malicious exit relays beyond other relays is that they perform some man-in-the-middle active attack. This is largely mitigated by end-to-end encryption. Tor Browser will soon be HTTPS only (other than explicit manual overrides) to help avoid inavertent non-e2e protected connections.
More in another recent blog post: https://blog.torproject.org/malicious-relays-health-tor-network/ https://blog.torproject.org/malicious-relays-health-tor-netw...
- noncoml 4y ago> running multiple relays without correctly setting the family attribute to identify them as being run by a single entity. How do know who is the actual real owner behind a machine on the internet?
- sporksmith 4y agoThere is a bit of a heuristics-based arms race here for sure. https://blog.torproject.org/malicious-relays-health-tor-network/ https://blog.torproject.org/malicious-relays-health-tor-netw... talks about this