#19963: Cannot login to trac through the onion service
 Reporter:  cypherpunks                       |          Owner:  qbi
     Type:  defect                            |         Status:  new
 Priority:  Medium                            |      Milestone:
Component:  Internal Services/Service - trac  |        Version:
 Severity:  Normal                            |     Resolution:
 Keywords:                                    |  Actual Points:
Parent ID:                                    |         Points:
 Reviewer:                                    |        Sponsor:

Comment (by cypherpunks):

  * Patch trac to remove the "secure flag" requirement for the onion
  * Patch it to not require cookies (It's always annoying to log in here
 because I have to go adjust browser settings, but I guess it wouldn't be
 easy to patch).
  * Use a self-signed certificate, but "cheat" and ship it with the Tor
  * Or make a CA constrained to torproject.org and ship that with the
  * Patch the browser to set secure=1 for .onion URLs. (Proper review to
 determine the security impact probably makes this not worth the effort.)
  * Figure out how to get a certificate from a CA. Consider it an
 experiment, and document the process so others can do the same.

Ticket URL: <https://trac.torproject.org/projects/tor/ticket/19963#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
tor-bugs mailing list

Reply via email to