4 ms·
I host multiple onion services, mainly for email proxies and firewall traversal, and this is exactly the reason I use stealth onion services. With this setup,
by kyboren 10y ago
I host multiple onion services, mainly for email proxies and firewall traversal, and this is exactly the reason I use stealth onion services.
With this setup, only those client machines onto which I pre-load a cookie can decrypt a per-client encrypted copy of the "introduction point contact info" part of the descriptor. Malicious HSDirs wouldn't even know where to introduce themselves to my services, let alone the correct cookie for the INTRODUCE2 cells.
If you want to host an onion service, but don't want it publicly accessible, use 'HiddenServiceAuthorizeClient'.
- dmix 10y agoThis built into the tor server software? It parses cookies? This makes me want to learn how hidden services work. I'm curious how complex the code is.
- ryanlol 10y agoNo, the cookie is set in the config file. Search for HidServAuth and HiddenServiceAuthorizeClient at https://www.torproject.org/docs/tor-manual.html.en https://www.torproject.org/docs/tor-manual.html.en for further elaboration.
- dmix 10y agoYes clearly the client needs to store a cookie somewhere (config files, db, browser) but the server needs to parse it in order to authenticate the user. Thanks for the link.