4 ms·
Probably the best way would be to only route HTTPS traffic (with certificate pinning & checking) through tor. Plain HTTP traffic would go through your regular I
by rmc 13y ago
Probably the best way would be to only route HTTPS traffic (with certificate pinning & checking) through tor. Plain HTTP traffic would go through your regular ISP.
That avoids the "password collection"/MITM attack?
- chakalakasp 13y agoIt would be better to have it not route at all if unencrypted and the Tor feature is turned on. The idea is anonymity. Having it suddenly use your real-world IP because it sees you aren't using TLS breaks this.