2 ms·
Man in the middle attacks on Tor are possible. Check out Moxie Marlinspike's 2009 BlackHat DC Presentation on SSL Stripping: http://vimeo.com/50018478 http://v
by pwenzel 13y ago
Man in the middle attacks on Tor are possible. Check out Moxie Marlinspike's 2009 BlackHat DC Presentation on SSL Stripping:
http://vimeo.com/50018478 http://vimeo.com/50018478
http://www.thoughtcrime.org/software/sslstrip/ http://www.thoughtcrime.org/software/sslstrip/
- nwh 13y agoAttacks such as those referenced are are not relevant in this case. As this website is being served as a hidden service, the traffic never exits the Tor network. There's no SSL in use for a MITM attack to remove, nor does there need to be.
- bhitov 13y agoMoxie demonstrated sslstrip on Tor exit nodes. It will not work on hidden services as the address contains a hash of the server's public key.