[tor-talk] MITM attack: How to see Tor Messenger's exit node?

[Sukhbir Singh]

* Nurmi, Juha:

> Hi,
> 
> Yesterday, when I was using Tor Messenger, I detected that Off-the-Record
> Messaging fingerprints are not matching!
> 
> There seems to be a man-in-the-middle attack. The attacker probably is an
> exit node.
> 
> I was comparing public key fingerprints through a secure outside channel.
> 
> Is there a way to see the exit node that Tor messenger is currently using?
> I need this info to test the exit node and report it to Tor Project if it
> seems to perform this man-in-the-middle attack.

Not from the interface, but we do plan to support it:

    https://trac.torproject.org/projects/tor/ticket/10950

Also, we opened #18973 to track the issue of this possible authentication bug.
Let's carry the discussion there:

    https://trac.torproject.org/projects/tor/ticket/18973

-- 
Sukhbir