HelloZeroNet / HelloZeroNet/ZeroNet

Use Stealth or Basic Authentication

Offen
#1,186 1 Kommentar 0 Reaktionen 0 zugewiesene Personen Auf GitHub ansehen
Vorherrschende Sprache
JavaScript
Sterne
18.8k
Forks
2.3k
PR-Merge-Kennzahlen
Keine gemergten PRs in 30 T.

Beschreibung

This is a proposal.

ZeroNet has an "onion pooling" feature, creating "fake" identities to resist some basic fingerprinting attacks. There is a safer way to do this -- Stealth or Basic Authentication.

https://lists.torproject.org/pipermail/tor-talk/2017-November/043797.html

Use _basic_ authentication, so that you don't need to generate additional RSA keys. For basic authentication, the acceptable passwords can be the addresses of the sites which the onion service claims to be hosting.

> \>\>\> Hosting?
> I host `addr_1`, `addr_2` and `addr_3`.
> \>\>\> Give me some `addr_4` stuff!
> Authentication failed. Access denied.

There is certainly "implementation overhead." I recommend you use the `stem` control library. Fun fact: [it does not need any dependency](https://stem.torproject.org/faq.html#does-stem-have-any-dependencies) if you don't use its fanciest features.

API for creating these authenticated onion services: [`stem.control.Controller.create_ephemeral_hidden_service`](https://stem.torproject.org/api/control.html#stem.control.Controller.create_ephemeral_hidden_service)

Beitragsleitfaden

Für dieses Repository ist kein Beitragsleitfaden indexiert

Bewertung

Dieses Issue wurde noch nicht bewertet.

Neue Issues direkt in Ihr Postfach

Eine kurze Übersicht über anfängerfreundliche GitHub-Issues.