TLS works for me going to google.com because a central CA has signed the certificate presented by google.com Apparently there are directory servers that sign t

TLS works for me going to google.com because a central CA has signed the certificate presented by google.com Apparently there are directory servers that sign the public keys for each node, mitigating this MITM attack: https://news.ycombinator.com/item?id=6888307 https://news.ycombinator.com/item?id=6888307 Without those servers, if we assume the NSA owned the network the entire point would be moot. With those servers... I guess the NSA would have to fuck with your Tor client or steal those server's private keys.