[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: evil nodes



alexyz@xxxxxxxxxx writes:

> Is it possible for an exit node to inject malicious javascript code on
> http requests?

It's possible for any intermediary to modify content in any way. Is your
ISP trustworthy? What about the other 10 ISPs your web requests go
through?

There's no substitute for end-to-end integrity checking, such as that
provided by SSL.


-- 
http://www.eff.org/about/staff/#chris_palmer

Attachment: pgp4pIrCIODQf.pgp
Description: PGP signature