[tor-bugs] #5548 [Tor Bridge]: Write a proposal for using a front-end proxy like apache for bridge scanning resistance

Tor Bug Tracker & Wiki torproject-admin at torproject.org
Fri Apr 13 15:18:25 UTC 2012


#5548: Write a proposal for using a front-end proxy like apache for bridge
scanning resistance
------------------------+---------------------------------------------------
 Reporter:  karsten     |          Owner:  nickm                  
     Type:  project     |         Status:  new                    
 Priority:  normal      |      Milestone:  Sponsor F: July 1, 2012
Component:  Tor Bridge  |        Version:                         
 Keywords:              |         Parent:                         
   Points:              |   Actualpoints:                         
------------------------+---------------------------------------------------

Comment(by karsten):

 Adding a few notes from the #tor-dev meeting yesterday:

  - Nick is going to write a proposal for using a front-end proxy like
 Apache for bridge scanning resistance.  Roger is most interested in the
 question "what changes on the Tor side will make it easier for people who
 want to stick a $foo in front of Tor to make Tor look like $foo unless you
 authenticate right;" where Apache is the first $foo.  George added that
 the other question is "what changes on the $foo side will be needed."

  - George asked how the Apache->Tor transition on correct password is
 going to happen.  Roger mentioned a master's student at UT who wrote an
 Apache module to proxypass Tor traffic if you GET the right URL first.

  - Nick says that July 1 is fine as a milestone if the deliverable is just
 "a proposal with some discussion."  We probably don't need substeps for
 this deliverable.

  - Roger says that Dan Boneh is excited to think about front-end proxies
 for bridge scanning resistance from a theory level.  So once we have
 something we should involve him.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/5548#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list