[tor-dev] Using Tor as a library
christopher at ch.ristopher.com
Thu Mar 28 11:10:44 UTC 2013
"Fabio Pietrosanti (naif)" <lists-BEJ3GKOyH/EwUp2xcto6ig at public.gmane.org> writes:
> That's the future of Tor, to be integrated as a library just like an
> encryption library into application.
No, it's not. Embedding a Tor client in another application cripples
auditability, configurability, updateability etc. of Tor. So does
embedding a controller. Even worse, an application trying to outsmart
the user by controlling Tor on its own poses a severe security risk.
Other than an encryption library, there is no well-defined output to an
input that a Tor library should produce.
Tor is a vivid, organic ecosystem of different, replaceable projects
that integrate into each other. Embedding a static subset of these in
an application is wrong.
More information about the tor-dev