[tor-bugs] #7349 [Tor]: Obfsbridges should be able to "disable" their ORPort

[Tor Bug Tracker & Wiki]

#7349: Obfsbridges should be able to "disable" their ORPort
------------------------+---------------------------------------------------
 Reporter:  asn         |          Owner:                  
     Type:  task        |         Status:  new             
 Priority:  normal      |      Milestone:  Tor: unspecified
Component:  Tor         |        Version:                  
 Keywords:  tor-bridge  |         Parent:                  
   Points:              |   Actualpoints:                  
------------------------+---------------------------------------------------
 In the future, we will want obfsbridges to only expose their obfsports and
 not their ORPort, otherwise an adversary can launch an active-scanning
 attack against the ORPort.

 We should spec and implement a torrc option that hides the ORPort of
 obfsbridges.

 Maybe it should make the ORPort bind on localhost. But what happens if the
 transport proxy is not on the same host as the ORPort?

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/7349>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online