Defeat Exit Node Sniffing?

Chris Palmer chris at noncombatant.org
Mon Mar 3 05:39:12 UTC 2008


scar writes:

> sorry, but that's not entirely true.  if you watch your tor circuits,
> gmail will jump to one insecure connection on port 80 to do "something"
> during the login phase, and then go back https, even if you use
> https://mail.google.com/.  this has been discussed to death, please search
> the archives.

I just ran a test with a clean instance of Firefox (Tools -> Clear Private
Data) and a fresh instance of WebScarab in which I browsed to
https://mail.google.com/, logged in, and viewed my inbox. WebScarab shows
exclusively HTTPS connections (to several Google hostnames), no HTTP
connections at all.



More information about the tor-talk mailing list