Great explanation, just want to add that when you use Tor hidden services to communicate (i.e. no exit node involved or needed), everything is end-to-end encryp

Great explanation, just want to add that when you use Tor hidden services to communicate (i.e. no exit node involved or needed), everything is end-to-end encrypted and the MITM attack scenario doesn't apply. Hidden services are also not vulnerable to: > "The Tor design doesn't try to protect against an attacker who can see or measure both traffic going into the Tor network and also traffic coming out of the Tor network. That's because if you can see both flows, some simple statistics let you decide whether they match up." because all traffic is within the Tor network.