Security and Privacy using HTTPS and Onion Routing

TARUN BATRA

SHIVANU BHATEJA

Internet Communication

Alice

Google

Internet

Anonymity

WHY ?

A journalist in North Korea

A person who envy privacy

FROM

TO

Anonymity

HOW ?

Alice

Google

Onion Routing

Bob

Carol

Dan

Erin

Frank

Garry

Alice

Internet

Google

Cell

DATA

LAYER 3

LAYER 2

LAYER 1

Limitations

Not perfect
High Latency
Exit Node Vulnerability
Unethical use

Onion Routing

HTTPS

HTTP  +  SSL/TLS

HTTP       FTP        SMTP

SSL/TLS       ASCII        JPEG

TCP       UDP

RPC        PAP

IPv4        IPv6        AppleTalk

PPP      IEEE 802.2       L2TP

DSL       USB

Application Layer

Presentation Layer

Session Layer

Transport Layer

Network Layer

Data Link Layer

Physical Layer

SSL Handshake

Limitations

HTTPS

Bugs like Heartbleed
Attacks like SSL stripping

Normal

Communication

TOR

HTTPS

TOR

+

HTTPS

Questions ?

Tor + HTTPS

By Tarun Batra

Tor + HTTPS

Addressing Security and Privacy Concerns on the Internet using HTTPS and TOR . In this paper presentation I pointed out the benefits of using HTTPS enable websites to prevent eavesdropping due to the exploitation of exit node vulnerability of Onion Routing.

  • 1,730