#7349: Obfsbridges should be able to "disable" their ORPort
------------------------+---------------------------------------------------
Reporter: asn | Owner:
Type: task | Status: new
Priority: normal | Milestone: Tor: unspecified
Component: Tor | Version:
Keywords: tor-bridge | Parent:
Points: | Actualpoints:
------------------------+---------------------------------------------------
In the future, we will want obfsbridges to only expose their obfsports and
not their ORPort, otherwise an adversary can launch an active-scanning
attack against the ORPort.
We should spec and implement a torrc option that hides the ORPort of
obfsbridges.
Maybe it should make the ORPort bind on localhost. But what happens if the
transport proxy is not on the same host as the ORPort?
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/7349>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
[email protected]
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs
