[tor-bugs] #19757 [Applications/Tor Browser]: Make a menu to add onion and auth-cookie to TB

Tor Bug Tracker & Wiki blackhole at torproject.org
Tue Feb 18 22:47:09 UTC 2020


#19757: Make a menu to add onion and auth-cookie to TB
-------------------------------------------------+-------------------------
 Reporter:  mrphs                                |          Owner:  brade
     Type:  defect                               |         Status:
                                                 |  needs_review
 Priority:  Medium                               |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  ux-team, tbb-usability, tor-hs,      |  Actual Points:  7.5
  TorBrowserTeam202002R                          |
Parent ID:  #30000                               |         Points:  8
 Reviewer:  pospeselr, acat, sysrqb              |        Sponsor:
                                                 |  Sponsor27-must
-------------------------------------------------+-------------------------

Comment (by sysrqb):

 All the patches look good. It seems like we may want a follow up ticket
 (probably for after s27) where Tor Browser generates the keys, too.

 This idea is from [[https://spec.torproject.org/rend-spec-v3#n625 | rend-
 spec-v3 [CLIENT-AUTH] ]]:
 {{{
    The right way to exchange these keys is to have the client generate
 keys and
    send the corresponding public keys to the hidden service out-of-band.
 An
    easier but less secure way of doing this exchange would be to have the
    hidden service generate the keypairs and pass the corresponding private
 keys
    to its clients. See section [CLIENT-AUTH-MGMT] for more details on how
 these
    keys should be managed.
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/19757#comment:44>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list