Conversation

Notices

1. Embed this notice
   silverwizard (silverwizard@convenient.email)'s status on Friday, 20-Dec-2024 12:34:56 JST silverwizard

   in reply to

   • Jan Schaumann
   @jschauma lots of malware talks over Tor, meaning that Tor is one of those "something is wrong" signals. If you're an IT team, signals are all you have. And ideally users should trust your routes for work stuff
   • Embed this notice
     Jan Schaumann (jschauma@mstdn.social)'s status on Friday, 20-Dec-2024 12:34:57 JST Jan Schaumann

     Enterprise IT Security tends to lose its shit when their endpoint protection finds #Tor browser on employees' devices.

     Unless you do deep packet inspection / middlebox all traffic, I don't see a meaningful risk increase. (If you do, then it seems comparable to e.g., Apple Private Relay + browsers' DoH use.)

     Does anybody have a good summary (not written by a VPN vendor) on the actual risk to the enterprise from its use by average users (not attacks on Tor itself, nor running a Tor node)?