[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #18759 [Tor]: Extend onion address to include authentication data

#18759: Extend onion address to include authentication data
----------------------------------------------------+---------------------
 Reporter:  twim                                    |          Owner:
     Type:  enhancement                             |         Status:  new
 Priority:  Medium                                  |      Milestone:
Component:  Tor                                     |        Version:
 Severity:  Normal                                  |     Resolution:
 Keywords:  authenticated, hs, rendclient, address  |  Actual Points:
Parent ID:                                          |         Points:
 Reviewer:                                          |        Sponsor:
----------------------------------------------------+---------------------

Comment (by arma):

 Once upon a time, we expected onion addresses to be of the form x.y.onion,
 where we indeed put other things like authentication info in them.

 But we abandoned this design when we realized that client applications
 like browsers were sending the whole address along in their Host: header,
 so putting sensitive things there is going to cause surprises and bad
 results.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18759#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs