Tor is anonymity software that hides your IP address from the website you are visiting by sending your traffic through three hops, also called Tor relays. HTTPS encrypts your web traffic between your browser and the website you are visiting. These two technologies are separate but complimentary. Here is the best visualization I seen so far ... Is there anything better ? #askNostr

https://tor-https.eff.org/

Reply to this note

Please Login to reply.

Discussion

Strange that I don't see .onion mentioned. It does not need HTTPS due to the traffic being e2e encrypted already

Aha .. I chose to share it just because the graphic made me understand the importance of #gossip protocol .. aka how broken is #http :-) ... It sure doesn't represent the entire picture ..

First off, let me just say that the biggest issue people will find with Tor is not necessarily some highly theoretical attack, some vulnerability that can be found by crawling through the source code, or even some issue with the implementation of Tor in practice. What I find that turns people away from Tor is that they want something that will make them feel like they are in control and know what they are doing, but won't require them to put in the work to develop and defend their own understanding of Tor. I hear a lot of people talk about how Tor was originally developed by the US government, or give anecdotes where someone with all around poor op-sec got themselves compromised despite using Tor. If you press these people for a more specific and verifiable issue with Tor, you won't get a real response, because their position is not about whether Tor is actually safe.

But if you ask me? Tor is the best. There are probably a couple obscure mix-networks out there that could theoretically beat Tor if they were anywhere near as mature, but I'm skeptical.

VPN's are based on centralized trust. Tor is based on decentralized trust. But I've been working on a theoretical communication model that can achieve anonymity with zero trust at all. Most of my effort has been going into trying to prove that it's impossible, but no luck so far. I'd love to talk about it if you are interested.