Data visibility with Tor and https protocol

[Shaolin]

Cute and informative diagram (yet not directly linkable):

How HTTPS and Tor Work Together to Protect Your Anonymity and Privacy

Click the "Tor" button to see what data is visible to eavesdroppers when you're using Tor. The button will turn green to indicate that Tor is on. Click the "HTTPS" button to see what data is visible to eavesdroppers when you're using HTTPS. The button will turn green to indicate that HTTPS is on....

www.eff.org

Bonus tip - If you use obfsproxy (alpha stage at the moment) you will "hide" that you are using Tor.

 

[cyb]

Interesting...so https isn't so bad after all...

Good because Tor is ridiculously Slooooww..

 

[♯]

Definitely use HTTPS in conjunction with TOR (if you're going to use it). Like that diagram shows, the exit nodes on Tor networks suffer from a vulnerability by design. That exit node may be able to dump RAM and see anything passing through it.

Also, props on obfsproxy. If you're that paranoid about NSA/ISP dumping your info, running obfsproxy should mitigate the DPI(Deep packet inspection) techniques these guys use to determine TOR protocols. That's not to say the math geeks in the NSA labs aren't already working out how to determine what TOR traffic has been obfuscated.

Regards to TOR being slow, if you look in TOR's connection info, you should be able to drop the bottleneck routers (i.e. the ones with low throughput)