Misconfigured Apache Servers Leak Details About Tor Traffic

Discussion in 'privacy technology' started by Minimalist, Jan 31, 2016.

  1. Minimalist

    Minimalist Registered Member

    Joined:
    Jan 6, 2014
    Posts:
    5,055
  2. mirimir

    mirimir Registered Member

    Joined:
    Oct 1, 2011
    Posts:
    6,028
    That's another good reason to use separate Tor gateways, as Whonix does. The webserver etc are bound to the server's LAN IP address, not localhost. And onion services in the gateway Tor client point to that server's LAN IP address. Everything in the server bound only to localhost stays private.
     
  3. lotuseclat79

    lotuseclat79 Registered Member

    Joined:
    Jun 16, 2005
    Posts:
    5,094
  4. mirimir

    mirimir Registered Member

    Joined:
    Oct 1, 2011
    Posts:
    6,028
    Another point: Never use Apache for onion sites. Nginx or lighttpd.
     
Loading...