bk99.de entertain the web since 1997

bk99.de
HN · AnonymityCurated

Tor and HTTPS protect different paths

Summary

The EFF graphic explains which observers see which data with Tor, HTTPS, both or neither layer of protection. Tor routes traffic through several relays. HTTPS authenticates the target server via certificates.

Ideas

  • Tor hides the origin address from the target server.
  • HTTPS encrypts content between browser and target server.
  • The Tor exit node sees unencrypted HTTP traffic.
  • Depending on the setup, DNS and destination information remain partly visible.

Insights

  • Anonymity and confidentiality of content are separate security properties.
  • Layers of protection must be chosen against the respective observer.
  • An encrypted connection can still reveal metadata.

Facts

  • Tor and HTTPS can be used together.

Recommendations

  • Use HTTPS within Tor as well.
  • Never send identifying data just because the connection is anonymous.

References

Read the original article

Search the Web Archive

HN · 2009

The first few milliseconds of an HTTPS connection

Jeff Moser breaks an HTTPS connection down into DNS, TCP, the TLS handshake, certificate validation, key exchange and encrypted HTTP data. The article illustrates a complete TLS handshake. Certificate authorities sign certificates within a chain of trust.

HN · 2026

Asahi Linux 7.2: progress on Apple Silicon

James Calligeros describes how Asahi Linux brings together power-saving features, new Apple generations and direct video output. M3 devices now support the webcam, microphones, USB 3.0 and Thunderbolt. M4 and M5 systems reach working NVMe and initial PCIe device detection.

HN · 2026

htop explained

Pēteris Ņikiforovs explains every htop display and links it with Linux processes, the scheduler, memory management and procfs. /proc/loadavg provides load values, process counts and the most recently assigned PID. PID 1 traditionally belongs to the init process started at boot.