[tbb-bugs] #14389 [Core Tor/Tor]: little-t-tor: Provide support for better TBB UI of hidden service client authorization

[Tor Bug Tracker & Wiki]

#14389: little-t-tor: Provide support for better TBB UI of hidden service client
authorization
-------------------------------------------------+-------------------------
 Reporter:  asn                                  |          Owner:  tbb-
                                                 |  team
     Type:  defect                               |         Status:
                                                 |  needs_revision
 Priority:  Medium                               |      Milestone:  Tor:
                                                 |  0.4.2.x-final
Component:  Core Tor/Tor                         |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  tor-hs, tbb-usability, ux-team, hs-  |  Actual Points:
  auth                                           |
Parent ID:  #30000                               |         Points:  14-24
 Reviewer:                                       |        Sponsor:
                                                 |  Sponsor27-must
-------------------------------------------------+-------------------------

Comment (by asn):

 Replying to [comment:47 mcs]:
 > Replying to [comment:46 asn]:
 > > Thanks for digging into this! From the above issues, only this one
 about proxy bypass seems to be blocker to me. All the others are things
 that can be solved with some moderate engineering efforts IIUC. However,
 if we can't guarantee that we have no proxy bypass we can't really proceed
 with HTTP CONNECT, right? What do you think?
 >
 > <snip>
 >
 > Georg reminded me earlier today that the browser already successfully
 associates asynchronous control port events with browser tabs for the
 circuit display. Kathy and I will take a fresh look at that code to see
 how it works.

 Sounds good. That makes lots of sense. Let's ditch HTTPCONNECT for now,
 and do it with controlport (or SOCKS).

 Please let us know what kind of info you would need from such an asynch
 event to associate it with a browser tab, and any other thing you need,
 and we will write it up for you.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/14389#comment:48>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online