Just wanted to remind folks that just because you are using https (TLS) does not mean your traffic is not being decrypted.
If an exit node is being run by bad guys then they are probably also using mitmproxy, SSLsplit, something like qlproxy and Diladele, or some other cert replacement routine to perform a man in the middle attack.
Check your certificates when you connect to sites from a TOR.
5 Likes
