[tor-bugs] #20022 [Core Tor/Tor]: Tor should deprecated insecure cookie auth
Tor Bug Tracker & Wiki
blackhole at torproject.org
Mon Aug 29 20:33:54 UTC 2016
#20022: Tor should deprecated insecure cookie auth
------------------------------+-----------------
Reporter: dkg | Owner:
Type: defect | Status: new
Priority: Medium | Milestone:
Component: Core Tor/Tor | Version:
Severity: Normal | Keywords:
Actual Points: | Parent ID:
Points: | Reviewer:
Sponsor: |
------------------------------+-----------------
control-spec.txt points out that normal cookie auth represents a security
risk for clients.
The Tor daemon should either stop accepting insecure cookie auth entirely,
or should log when a client uses insecure cookie auth.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/20022>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list