Mozilla Project Fusion: Tor Integration into Firefox

Post by tomrittervg » Fri, Jun 01, 2018, 9:24 PM UTC

MayeulC wrote: post #178

Great news ! With wider adoption of ipv6 and all the good things that come with it (don't mistake me, they are great!) also comes the risk that each computer will get a uniquely identifiable IP address that will be used for fingerprinting. I've never really used Tor in the past, but this got me thinking about it. An option could be to provide a webRTC-based node, but I am not sure how feasible that would be, after re…

Post by Spooky23 » Fri, Jun 01, 2018, 9:38 PM UTC

sp332 wrote: post #174

Spooky23 wrote: post #168

Earlier quoted context omitted.

The risk now is that some bad actor is replacing TLS certificates, which is an uncommon and tamper-evident event. Tor is handing your traffic to an unknown 3rd party. Plus, users do not understand what Tor is or how to use it. Fighting political battles with software is dumb — the end result is going to be a permanent loss of freedom, as governments force the use of platforms with trusted app stores.

The risk now is BGP hijacking. Or really just normal operation of BGP. You data could go anywhere on the planet on its way to the destination and you're not going to know ahead of time what path any particular packet will take. If you're using TLS, it doesn't matter so much if the exit node is malicious because they still won't be able to read it.

Post by bunkydoo » Fri, Jun 01, 2018, 9:53 PM UTC

Post by lozaning » Fri, Jun 01, 2018, 10:17 PM UTC

pricechild wrote: post #164

xoa wrote: post #145

Earlier quoted context omitted.

> You can also run Tor relays and help us improve the health of the network by working with Tor's new Relay Advocate Since I've seen this come up before in many previous discussions of Tor I think it's worth emphasizing/clarifying up front: Tor relays are not the same as Tor exit nodes. Relays do not talk to the public internet, they serve only the full encrypted internal Tor virtual network. So they won't ever send…

That said, plenty of providers use the list of tor relays (which is also public) to block traffic. Sites such as https://www.dan.me.uk/dnsbl then help people do this. That site in particular may "warn": > This DNS blacklist contains ALL tor nodes (entry, transit and exit nodes) - think carefully before choosing to use this list for blocking purposes. but anyone who doesn't understand tor simply won't understand the d…

Post by ngold » Fri, Jun 01, 2018, 10:42 PM UTC

mirimir wrote: post #163

chipperyman573 wrote: post #41

Earlier quoted context omitted.

I can't read this article because I'm at work, but unless they managed to solve the problem of Tor being very, very, very slow, this will never happen. End users will definitely notice a difference and likely won't care about their privacy. They'll just see Firefox being way slower than Chrome and switch.

This would be a privacy option for Firefox, not the default. But yes, Tor introduces latency and reduces bandwidth. For traffic to the open Internet, traffic uses circuits through three relays: entry guard, middle and exit. So there are four hops between users and websites, instead of one. The Earth's circumference is about 40 thousand km. So the longest path is arguably ~20 thousand km. And rtt for that would be abo…