[tor-bugs] #4700 [Core Tor/Tor]: Tor should provide a mechanism for hidden services to differentiate authorized clients and circuits

[Tor Bug Tracker & Wiki]

#4700: Tor should provide a mechanism for hidden services to differentiate
authorized clients and circuits
-------------------------------------------------+-------------------------
 Reporter:  katmagic                             |          Owner:  (none)
     Type:  enhancement                          |         Status:  new
 Priority:  Medium                               |      Milestone:  Tor:
                                                 |  unspecified
Component:  Core Tor/Tor                         |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  tor-control, needs-proposal, tor-hs  |  Actual Points:
  needs-design, 035-proposed                     |
Parent ID:                                       |         Points:  10
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by asn):

 Hmm, yes indeed we want some torrc options. Perhaps we can introduce a
 string torrc option `HSClientIdentifierMethod` which takes the `proxy`
 value (or `haproxy`) value for the proxy protocol of comment:10? And then
 in the future perhaps we can introduce other methods, like `client_auth`
 which returns the name of the client visiting, etc.?

 Also as you pointed out, the current patch will do the protocol also for
 regular exit conns. We should check that the `edge_connection_t` has
 either `hs_ident` or rend_data` before doing the protocol.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/4700#comment:15>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online