[tbb-dev] Idea: hidden service in tor browser

[arj03 at pm.me]

Hi

The browser is a great platform target because it is cross platform and with all the changes coming to browsers it is easier and easier to write applications that can have the same functionality as desktop applications. This includes P2P applications and this is where I think the tor browser can really shine, because if it would be possible to create hidden services inside the browser, then it would be possible to build applications where the nodes are communication directly with each other.

I know that there are security implications of running a browser and a hidden service in the same process. I'm wondering if it might be possible to create this hidden service for only a specific tab (and site)? Maybe the security could be improved further by make it so this tab could only create tor connections outgoing connections?

These applications are already there. Shameless link[1] to own app, which is a secure scuttlebutt (SSB) application where messages are gossipped between peers, running in the browser. SSB desktop clients can already run over tor, by using the deamon as proxy so it would be quite natural fit for this.

[1]: https://github.com/arj03/ssb-browser-demo
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.torproject.org/pipermail/tbb-dev/attachments/20200109/d49fab40/attachment.html>