Thanks - yes, this is what I think happens:
Tor:
Client (me) ---> Tor Node 1 ---> Tor Node 2 ---> Tor Node 3 (exit node) --->
Internet (HTTP or HTTPS).
Internet (HTTP or HTTPS) ---> Tor Node 3 ---> Tor Node 2 ---> Tor Node 1 --->
Client (me).
The DNS is done remotely at Tor Node 3 (exit node).
All traffic from the client to Tor Node 3 is encrypted. This includes the
headers (IP address of the destination) and body of the message.
The client's ISP can only see that the client (me) has connected to the IP
address of Tor Node 1. That's it. Nothing more.
Correct?
Tor plus VPN:
Client (me) ---> VPN ---> Tor Node 1 ---> Tor Node 2 ---> Tor Node 3 (exit
node) ---> Internet (HTTP or HTTPS).
Internet (HTTP or HTTPS) ---> Tor Node 3 ---> Tor Node 2 ---> Tor Node 1 --->
VPN ---> Client (me).
The ISP can only see that the client (me) has connected to the IP address of
the VPN.
The VPN owner can only see that the client (me) had connected from my IP
address (provided by my ISP) and requests to connect to the IP address of Tor
Node 1.
All traffic from the client is first encrypted by Tor and then sent to the VPN
which adds its own encryption. The VPN will decrypt its encryption after the
traffic exists the VPN system. The Tor encryption continues until Tor Node 3.
The return journey will show the Tor encrypted traffic pass through the Tor
system until it gets to Tor Node 1 and then enters the VPN system which will
add its encryption. Then, when the traffic reaches the client (me), the VPN
will decrypt its encyrption, and then Tor will decrypt its traffic.
Correct?
Many thanks! I appreciate your time and help.
From: SiNA Rabbani
To: tor-talk@lists.torproject.org
Cc: Aaron Whiteman
Sent: Monday, May 28, 2012 6:19 PM
Subject: Re: [tor-talk] Tor + VPN + DNS (?)
If you use a VPN and then connect to Tor, assuming your application is
sending all packets through Tor's socks proxy, then the answer would be yes!
--SiNA
On 05/27/2012 01:46 PM, Aaron Whiteman wrote:
> I think that if I run Tor with a VPN (and that the VPN does the DNS) then Tor
> will still do the DNS at the exit node.
>
> Me > VPN > Tor Node 1 -> Tor Node 2 --> Tor Node 3 (exit
> node) -> Internet
>
>
> Correct?
>
> Thanks.
> ___
> tor-talk mailing list
> tor-talk@lists.torproject.org
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
--
First they ignore you, then they laugh at you, then they fight you, then
you win ~ Mahatma Gandhi
___
tor-talk mailing list
tor-talk@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
