[tor-bugs] #5185 [Tor Client]: Implement ‘safe cookie authentication’ in Tor

[Tor Bug Tracker & Wiki]

#5185: Implement ‘safe cookie authentication’ in Tor
--------------------------+-------------------------------------------------
 Reporter:  rransom       |          Owner:                    
     Type:  enhancement   |         Status:  needs_review      
 Priority:  critical      |      Milestone:  Tor: 0.2.2.x-final
Component:  Tor Client    |        Version:                    
 Keywords:  security-fix  |         Parent:                    
   Points:                |   Actualpoints:                    
--------------------------+-------------------------------------------------

Comment(by rransom):

 Replying to [comment:2 atagar]:
 > I would much rather if part of this patch included an addition to stem
 for handling this new safe cookie handshake. If you did that then I'd be
 happy to provide integ tests for your new feature. That said, I proposed
 this on your tor-talk@ thread and got stony silence. Pity - it's not good
 if we neglect maintainability...

 I was busy revising the protocol at the time, to remove some bugs from the
 protocol.  I'll post Python 2 code to implement the controller side of the
 protocol soon.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/5185#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online