Re: [tor-talk] problems faced with tor browser

[Sangy <sangy@xxxxxxxxxx>]

On Thu, Oct 20, 2016 at 12:20:30AM +0200, Andreas Krey wrote:
> On Wed, 19 Oct 2016 16:53:19 +0000, Sangy wrote:
> ...
> > > 2] when i try to do internet banking, the bank sites does not allow access.
> > > is there any solution for this?
> > Please don't. You are introducing a man in the middle between yourself
> > and the banks...
> 
> Why? Any bank should use https, and the chance of an exit
> presenting a rogue cert for your bank isn't exactly high.

Yes, they *should*. It's not like it hasn't happened before[1]. You are
also assuming they have HSTS properly enabled and/or their SSL setup is
properly configured[2]. The danger here is to assume things are safe on
their end.

What is the benefit of doing banking through tor? 

Thanks.

[1] https://link.springer.com/chapter/10.1007/978-3-319-08506-7_16
[2] http://business-reporter.co.uk/2016/01/06/over-half-of-the-uks-online-banking-sites-are-vulnerable-to-low-skilled-attacks/
-- 
tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk