Misconfigured Apache Servers Leak Details About Tor Traffic

Discussion in 'privacy technology' started by Minimalist, Jan 31, 2016.

  1. Minimalist

    Minimalist Registered Member

    Joined:
    Jan 6, 2014
    Posts:
    14,885
    Location:
    Slovenia, EU
  2. mirimir

    mirimir Registered Member

    Joined:
    Oct 1, 2011
    Posts:
    9,252
    That's another good reason to use separate Tor gateways, as Whonix does. The webserver etc are bound to the server's LAN IP address, not localhost. And onion services in the gateway Tor client point to that server's LAN IP address. Everything in the server bound only to localhost stays private.
     
  3. lotuseclat79

    lotuseclat79 Registered Member

    Joined:
    Jun 16, 2005
    Posts:
    5,390
  4. mirimir

    mirimir Registered Member

    Joined:
    Oct 1, 2011
    Posts:
    9,252
    Another point: Never use Apache for onion sites. Nginx or lighttpd.
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.