* on the Sun, Oct 19, 2008 at 07:14:31AM -0500, Scott Bennett wrote: >> Besides, opening ports < 1024 usually requires root-privileges, >> which could introduce serious security issues if an exploitable >> flaw were found in Tor. You can still advertise port 443 as your >> ORPort and listen on 9001, but this requires some port-forwarding >> magic, which is not entirely feasible for a default >> configuration. (But your other reason is sound as well) > Also good points. Another is that an unprivileged user on a multi-user > system may wish to run a tor relay, which would require a few configuration > tricks, but should definitely be doable. However, as you point out, an > unprivileged user ought not to be able to open a secured port, so the default > should not be a port in the secure ports range.
I just took a quick glance and there seem to be at least a couple of hundred nodes running an OR port on 443, so people must be taking note of the documentation at http://www.torproject.org/docs/tor-doc-relay.html.en -- Erilenz
