[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #5968 [Tor]: Improve onion key and TLS management

#5968: Improve onion key and TLS management
-------------------------+--------------------------------------------------
 Reporter:  mikeperry    |          Owner:                    
     Type:  enhancement  |         Status:  new               
 Priority:  major        |      Milestone:  Tor: 0.2.5.x-final
Component:  Tor          |        Version:                    
 Keywords:  tor-relay    |         Parent:  #5456             
   Points:               |   Actualpoints:                    
-------------------------+--------------------------------------------------

Comment(by nickm):

 (Incidentally, if the attacker steals the identity key but doesn't have
 the right TLS cert, it will fail at MITMing any connection that uses
 AUTHENTICATE cells from the client.  So you can detect whether somebody's
 doing this today by making connections to a bunch of servers from an IP
 that isn't recognized as a server, and then trying to AUTHENTICATE to
 them.)

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/5968#comment:8>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs