Cloudflare experiments with hidden Tor services Cloudflare has added a Tor hidden service to its DNS services. Launching the service, the company explained that while it wipes logs and doesn't write client IP addresses to disk, “exceptionally privacy-conscious folks might not want to reveal their IP address to the resolver at all, and we respect that.” The resolver's …
Time to find out how to install TOR for all connections from my Linux box. and....
Would this help defeat the Windows slurp that by-passes all other efforts including MS remote access when they feel the need?
As this is down the list of priorities, any pointers gratefully received.
Currently, not that much.
So far, they've only launched Hidden Service support for their DNS over HTTPS (DoH) service.
What it means is that rather than transiting the open internet (whether directly or passing through Tor first), your lookups can go to their resolver without leaving the Tor network. That's a good thing (reduces usage of the limited exit node bandwidth, provides strong authentication that you're talking to an authorised server etc).
What they haven't launched (I suspect the word yet applies here) is support for hosting hidden services via Cloudflare. Though why anyone would want to....
... is a rather large business with several large investors and numerous customers. It has quite a large attack surface for various government agencies to work on. So it's not inconceivable that they might choose to build back doors when requested rather than just go out of business.
Spies could just setup and intermediate server as a participant in TOR and you would route thru them.
The country you use can see you connect to TOR regardless of Cloudfare.
Teclo's can watch local TOR Points with a TOR browser, logging them as they pop up, including Cloudfare links.
So good luck with the anonymous folks
A new free open source tool is available created by me called Technitium DNS Server which supports Cloudflare's DNS over Tor option directly in its settings. Just install the software go to settings and select the option and its done. Works with Windows, Linux and MacOS.
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2024
