[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #18759 [Core Tor/Tor]: Extend onion address to include authentication data

#18759: Extend onion address to include authentication data
-------------------------------------------------+-------------------------
 Reporter:  twim                                 |          Owner:
     Type:  enhancement                          |         Status:  closed
 Priority:  Medium                               |      Milestone:
Component:  Core Tor/Tor                         |        Version:
 Severity:  Normal                               |     Resolution:  wontfix
 Keywords:  authenticated, hs, rendclient,       |  Actual Points:
  address needs-proposal                         |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------
Changes (by nickm):

 * keywords:  authenticated, hs, rendclient, address => authenticated, hs,
     rendclient, address needs-proposal
 * status:  new => closed
 * resolution:   => wontfix


Comment:

 Referer headers also make this a pretty risky idea.

 I'm going to close this one as wontfix, but if you still think I'm wrong,
 please write a proposal for tor-dev about why this is worth the trouble
 and/or how to mitigate the security risks?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18759#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs