Re: tor-proxy.net is official proxy site of TOR? [Sorry, i meant to say http://torproxy.net/]

[Moritz Bartl <tor@xxxxxxxxxxxxxx>]

Hi,

On 22.07.2010 15:24, krishna e bera wrote:
> That new site does not respond.
> 
> Also, the same design flaw applies to ANY remote web-based proxy:
> it is a single concentrator and can thus is a magnet to be attacked
> or have its incoming connections monitored.  If the connections
> are SSL (https) it might be slightly more difficult to snoop on, 
> but most people do not check certificates so MITM could still occur.

Also see http://files.cloudprivacy.net/ssl-mitm.pdf on this issue.

Moritz

***********************************************************************
To unsubscribe, send an e-mail to majordomo@xxxxxxxxxxxxxx with
unsubscribe or-talk    in the body. http://archives.seul.org/or/talk/