[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-dev] Whonix's help_check_tor_bootstrap.py



Hi Damian,

thank you for your e-mail!

That script is stable, no bug reports in a while, stem is working fine. :)

That authentication line and "password" is only in there to make stem
happy. help_check_tor_bootstrap.py/stem isn't "really" using Tor's
control port. It connects to Control Port Filter Proxy (CPFP) [1], which
does the real authentication. CPFP - a whitelisting proxy - accepts any
password, authenticates to Tor using cookie and filters out potentially
dangerous (for anonymity) commands (such as getinfo address).

Cheers,
Patrick

[1] https://www.whonix.org/wiki/Dev/CPFP
_______________________________________________
tor-dev mailing list
tor-dev@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev