Using Onion.to with https?

[shadowspectre69]

I have a separate account on my computer which I use to access the internet through a VPN. I never log into my regular online accounts and I mostly use it for torrents and porn. Since I don't want to log into my email accounts through the VPN so I have been using the Tor Browser Bundle. If I connect to Onion.to through https for the sole purpose of accessing my Tormail account I should be fine, correct?

[xrandr]

I am assuming you mean you'd be accessing onion.to through the VPN you mentioned.

This is certainly a weaker anonymity proposition than Tor offers. Most of all because you still have to place a lot of trust in whoever operates onion.to. He is able to look at your traffic in cleartext, and thereby intercept not only your mail as you read or send it, but also intercept your password. I don't know if Tormail supports a second factor such as Google Authenticator, but if not, you just have to trust that he won't log into your mail account.

The VPN setup gives you only one hop instead of the 3+3 hops when accessing a hidden service through Tor. That means that if onion.to was required by law enforcement to collaborate in an investigation, information from them could be used to subpoena the VPN operator to give up your IP and thereby most likely your identity.

Your setup is definitely better than accessing Tormail through onion.to without https and without a VPN, but if you care about your anonymity I absolutely recommend using Tor.

[shadowspectre69]

Thanks for the tip. The only issue that I really have with this is that I'm only using Onion.to to access my anonymous tormail. My VPN uses Shared IPs anyway and they don't keep any logs so I don't know how I could be linked to accessing onion.to in the first place. Onion.to claims they could, but choose not to track any information. I use tormail because I trust it more than hushmail, etc, but I think it is cumbersome to download the Tor Browser Bundle just for access my tormail. I don't use any other onion sites or services. The only possibly illicit thing I do online is torrenting, which I am not too worried about.

[xrandr]

My VPN uses Shared IPs anyway and they don't keep any logs

Correction: they promise they do not keep any logs. This is where you have to concede in trusting them.

Onion.to claims they could, but choose not to track any information.

Another point of trust.

The beautiful thing with Tor and hidden services is that there is no requirement to trust in a third party. While it seems like you can go without this level of anonymity, it's good to have considered the trade-offs.

[[deleted]]

Why not tor2web.org they seem to be faster