Re: [tor-dev] sketch: An alternative prop224 authentication mechanism based on curve25519

Thanks Lunar for bringing this into discussion. See below. David Goulet wrote: > On 06 Dec (17:23:10), Lunar wrote: >> Hi! >> >> Sorry to be late to the party. I still haven't seen UX concerns fully >> addressed, and I think we should not create a specification that will >> make the life of our

Re: [tor-dev] sketch: An alternative prop224 authentication mechanism based on curve25519

On 06 Dec (17:23:10), Lunar wrote: > Hi! > > Sorry to be late to the party. I still haven't seen UX concerns fully > addressed, and I think we should not create a specification that will > make the life of our users harder if we can avoid it. I believe it can be addressed by a good UI in TBB

Re: [tor-dev] sketch: An alternative prop224 authentication mechanism based on curve25519

Hi! Sorry to be late to the party. I still haven't seen UX concerns fully addressed, and I think we should not create a specification that will make the life of our users harder if we can avoid it. s7r: > George Kadianakis wrote: > > I have a more mature torspec branch now for your eyes and

Re: [tor-dev] sketch: An alternative prop224 authentication mechanism based on curve25519

George Kadianakis writes: > Nick Mathewson writes: > >> [ text/plain ] >> Hi! I thought I'd write this up while it was fresh in my mind. It >> could be used as an alternative method to the current proposed client >> authentication mechanism. We

Re: [tor-dev] sketch: An alternative prop224 authentication mechanism based on curve25519

Hello, George Kadianakis wrote: > Nick Mathewson writes: > >> [ text/plain ] >> Hi! I thought I'd write this up while it was fresh in my mind. It >> could be used as an alternative method to the current proposed client >> authentication mechanism. We could implement

Re: [tor-dev] sketch: An alternative prop224 authentication mechanism based on curve25519

Nick Mathewson writes: > [ text/plain ] > Hi! I thought I'd write this up while it was fresh in my mind. It > could be used as an alternative method to the current proposed client > authentication mechanism. We could implement both, or just this, or > just the other. > >

Re: [tor-dev] sketch: An alternative prop224 authentication mechanism based on curve25519

> - I feel that the max settings imposed by the 50k max size limit, will satisfy > most crazy hidden service use cases that someone might have wrt scalability > or number of authed clients. It can support up to 350 authed clients, and 20 > intro points. We should increase the max size limit,

Re: [tor-dev] sketch: An alternative prop224 authentication mechanism based on curve25519

David Goulet writes: > [ text/plain ] > On 15 Nov (16:29:33), George Kadianakis wrote: >> Nick Mathewson writes: >> >> >> >> Hello, >> >> I worked some more on prop224 client authorization. I have a draft >> torspec patch at prop224_client_auth_3 in

Re: [tor-dev] sketch: An alternative prop224 authentication mechanism based on curve25519

> On 18 Nov. 2016, at 09:20, David Goulet wrote: > > On 18 Nov (08:27:53), teor wrote: >> >>> On 18 Nov. 2016, at 03:52, David Goulet wrote: >>> I ended up using the x25519 scheme described above by Nick. I also ended up dodging the

Re: [tor-dev] sketch: An alternative prop224 authentication mechanism based on curve25519

On 18 Nov (08:27:53), teor wrote: > > > On 18 Nov. 2016, at 03:52, David Goulet wrote: > > > >> > >> I ended up using the x25519 scheme described above by Nick. > >> > >> I also ended up dodging the UX questions raised on this thread, by only > >> specifying the Tor

Re: [tor-dev] sketch: An alternative prop224 authentication mechanism based on curve25519

> On 18 Nov. 2016, at 03:52, David Goulet wrote: > >> >> I ended up using the x25519 scheme described above by Nick. >> >> I also ended up dodging the UX questions raised on this thread, by only >> specifying the Tor protocol level details, and leaving the out-of-band >>

Re: [tor-dev] sketch: An alternative prop224 authentication mechanism based on curve25519

On 15 Nov (16:29:33), George Kadianakis wrote: > Nick Mathewson writes: > > > [ text/plain ] > > Hi! I thought I'd write this up while it was fresh in my mind. It > > could be used as an alternative method to the current proposed client > > authentication mechanism. We

Re: [tor-dev] sketch: An alternative prop224 authentication mechanism based on curve25519

Nick Mathewson writes: > [ text/plain ] > Hi! I thought I'd write this up while it was fresh in my mind. It > could be used as an alternative method to the current proposed client > authentication mechanism. We could implement both, or just this, or > just the other. > >

Re: [tor-dev] sketch: An alternative prop224 authentication mechanism based on curve25519

George Kadianakis writes: > Also, it means that clients need to _securely_ send credentials to the > HS operator and then they need to _wait_ till the HS operator adds > those creds to Tor, before they are able to visit the HS. One thing that might help here is Brian

Re: [tor-dev] sketch: An alternative prop224 authentication mechanism based on curve25519

Regarding the API / interface for communicating client-keys for hidden- services .. I thought we were encouraging ADD_ONION based services? Personally, I think using the filesystem as "an API" isn't very good. From a controller standpoint, it's *way* simpler to use ADD_ONION properly than

Re: [tor-dev] sketch: An alternative prop224 authentication mechanism based on curve25519

> On 12 Nov. 2016, at 03:41, George Kadianakis wrote: > > teor writes: > >> [ text/plain ] >> >>> On 11 Nov. 2016, at 04:18, George Kadianakis wrote: >>> >>> George Kadianakis writes: >>> [

Re: [tor-dev] sketch: An alternative prop224 authentication mechanism based on curve25519

teor writes: > [ text/plain ] > >> On 11 Nov. 2016, at 04:18, George Kadianakis wrote: >> >> George Kadianakis writes: >> >>> [ text/plain ] >>> Nick Mathewson writes: >>> [ text/plain ] Hi! I

Re: [tor-dev] sketch: An alternative prop224 authentication mechanism based on curve25519

> On 11 Nov. 2016, at 04:18, George Kadianakis wrote: > > George Kadianakis writes: > >> [ text/plain ] >> Nick Mathewson writes: >> >>> [ text/plain ] >>> Hi! I thought I'd write this up while it was fresh in my mind. It

Re: [tor-dev] sketch: An alternative prop224 authentication mechanism based on curve25519

George Kadianakis writes: > [ text/plain ] > Nick Mathewson writes: > >> [ text/plain ] >> Hi! I thought I'd write this up while it was fresh in my mind. It >> could be used as an alternative method to the current proposed client >> authentication

Re: [tor-dev] sketch: An alternative prop224 authentication mechanism based on curve25519

Nick Mathewson writes: > [ text/plain ] > Hi! I thought I'd write this up while it was fresh in my mind. It > could be used as an alternative method to the current proposed client > authentication mechanism. We could implement both, or just this, or > just the other. > >