What is the Darknet?

At its core, the darknet is a part of the internet that is not accessible through conventional search engines and requires special software or configurations to access. It offers its users a high degree of anonymity and privacy.

To better understand the concept of the darknet, it's important to distinguish it from related terms:

1. Surface Web:
   This is the part of the internet we use daily - websites that can be found through regular search engines like Google.
2. Deep Web:
   This includes all web content that isn't indexed by search engines, such as password-protected pages, private networks, or databases.

The relevance of the darknet for the general public is multi-faceted. It plays an important role in terms of:

1. Criminal Activities:
   Unfortunately, the anonymity of the darknet is also used for illegal purposes, making it a focal point for law enforcement agencies. Weapons, drugs, and worse can be acquired on the darknet.
2. Political Freedoms:
   In countries with strict censorship, the darknet enables access to free information and protected communication for activists and journalists. Whistleblowers can safely publish information here without revealing their identity.
3. Privacy/Information:
   In an era of increasing digital surveillance, the darknet provides a space for anonymous communication and information exchange. Journalists can also use the darknet for research purposes to obtain unfiltered information.

How does the darknet work?

The heart of the darknet consists of advanced technologies that ensure anonymity and security. The most well-known and widespread of these technologies is the Tor network (The Onion Router).

Tor Network and Onion Routing

Tor is based on the principle of onion routing, a technique that routes data through multiple layers of encryption, similar to the layers of an onion. How it works:

1. Multilayer Encryption:
   When a user sends a request through the Tor network, this request is encrypted multiple times.
2. Network of Relays:
   The encrypted request is then routed through a series of at least three randomly selected relays (also called nodes) in the Tor network.
3. Layer-by-Layer Decryption:
   Each relay only decrypts one layer of encryption, meaning it only knows the address of the previous and next relay, but never the complete path or content of the message.
4. Exit Node:
   The last relay, called the exit node, decrypts the final layer and sends the request to the destination on the internet.

Through this process, the user's original IP address is obscured, making it nearly impossible to trace activities - at least in theory.

Special Domains and Services

In the Tor network, there are special ".onion" domains that are only accessible within the network. These services, often called "Hidden Services," allow websites to hide their physical location and operate anonymously.

Access to the Darknet

To access the darknet, users need special software. The Tor Browser is the most commonly used tool. It's a modified version of the Firefox browser that automatically routes all connections through the Tor network.

Network Security: Theory vs Practice

Despite its robust architecture, the darknet is not infallible. Attacks such as traffic analysis, timing attacks, or the compromise of exit nodes can potentially jeopardize anonymity. Users must take additional precautions, such as using VPNs, disabling JavaScript, or avoiding the disclosure of personal information, to maintain their anonymity.

The technological foundations of the darknet are complex and constantly evolving to meet new challenges and threats. Understanding these technologies is crucial to comprehending the possibilities and limitations of the darknet.

Meanwhile, there are justified assumptions that many exit nodes are controlled by security authorities.