[tor-bugs] #5548 [Tor Bridge]: Write a proposal for password-protected bridges

[Tor Bug Tracker & Wiki]

#5548: Write a proposal for password-protected bridges
------------------------+---------------------------------------------------
 Reporter:  karsten     |          Owner:  nickm                  
     Type:  project     |         Status:  new                    
 Priority:  normal      |      Milestone:  Sponsor F: July 1, 2012
Component:  Tor Bridge  |        Version:                         
 Keywords:              |         Parent:                         
   Points:              |   Actualpoints:                         
------------------------+---------------------------------------------------

Comment(by asn):

 Replying to [comment:1 arma]:
 > Whoever works on this should be aware of proposals 187, 189, 190, 191
 too.
 >
 > I don't have an opinion yet on which direction we'll want to go, or even
 if they're compatible or incompatible. I worry that these proposals don't
 actually provide a good way to act like an apache if the auth fails.

 True, I'm not sure if there is a truly good way to act like an Apache if
 the authentication fails, when "Tor first; Apache if auth fails" is used.

 In https://lists.torproject.org/pipermail/tor-
 dev/2011-November/003073.html, I suggested to have an Apache binding on
 localhost, and if the bridge receives a bad AUTHORIZE cell, switch the
 bridge to act as a tunnel between the bad client and Apache. (also, we can
 use IRC, SMTP, etc. servers, in place of Apache here)

 Still, I'm not sure if that's a good way.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/5548#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online