ValidaTor: Domain Validation over Tor
summary
An HTTP-based domain-validation prototype routes CA fetches through randomized Tor exit nodes using two-hop circuits and containerized workers, achieving 12 validations per second in tests and measuring ~47 KB per validation. Path-analysis over BGP shows Tor reduces ASs able to intercept all validators by up to 27% compared to Let’s Encrypt. Global scaling needs ~600–700 Mbps through Tor (≈300 Mbps on exits), about 0.1% of advertised Tor bandwidth. Probability of takeover by colluding exits remains negligible, ≤1% even with 25% malicious exits.
AI-written summary · about
chapters (9)
- 0:00Domain validation challenges
- 2:28Current validation vulnerabilities
- 5:58Tor for scalable validation
- 8:50Proof of concept design
- 10:16Path diversity and security
- 13:48Performance and scalability
- 15:52Bandwidth impact on Tor
- 17:13Mitigating malicious Tor nodes
- 18:37Conclusion and resources
related talks
31mDeTor: Provably Avoiding Geographic Regions in Tor
23mTowards Predicting Efficient and Anonymous Tor Circuits
26mCharacterizing the Nature and Dynamics of Tor Exit Blocking
54mAnonymity Loves Resilience: The Case of Tor
23mHow Do Tor Users Interact With Onion Services?
23mBamboozling Certificate Authorities with BGP
01h 16mAnonymity loves Diversity: The Case of Tor
24mOff-Path Attacks Against PKI