Re: [tor-dev] sending command from Exit node to client

2014-11-30 Thread rl1987
Tor instances you are running can be controlled via Tor control protocol [0] by software like Stem [1] or arm [2]. Unless something is very wrong, you cannot send commands to Tor instance other person is running. [0] https://gitweb.torproject.org/torspec.git/blob/HEAD:/control-spec.txt [1]

Re: [tor-dev] Of CA-signed certs and .onion URIs

2014-11-30 Thread Jeremy Rand
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/14/2014 08:37 PM, Jacob Appelbaum wrote: On 11/15/14, Lee ler...@gmail.com wrote: c) Get .onion IANA reserved It doesn't look like that's going to happen. https://datatracker.ietf.org/doc/draft-grothoff-iesg-special-use-p2p-names/ is

Re: [tor-dev] Specification for 'How to Safely Sign a statement with a .onion key'

2014-11-30 Thread Ian Goldberg
On Fri, Nov 28, 2014 at 03:22:18PM +, Steven Murdoch wrote: On 24 Nov 2014, at 18:54, Tom Ritter t...@ritter.vg wrote: Attached is a document written in the specification format for one aspect of CA-signed .onion addresses - specifically a What is a safe way to sign (or not sign) a

Re: [tor-dev] Git hosting changes, git:// support discontinued

2014-11-30 Thread Jason Cooper
On Sun, Nov 30, 2014 at 06:48:09PM +0100, Sebastian Hahn wrote: Hi there, git users! Hi Sebastian! At the same time, we've discontinued supporting clones via the git:// Protocol. :( It is unauthenticated and you probably shouldn't use it if at all possible. How does that matter? All of

Re: [tor-dev] Git hosting changes, git:// support discontinued

2014-11-30 Thread Yawning Angel
On Sun, 30 Nov 2014 17:32:05 -0500 Jason Cooper t...@lakedaemon.net wrote: It is unauthenticated and you probably shouldn't use it if at all possible. How does that matter? All of the tags are signed by Nick Mathewson. This allows the server *and* the path to be untrusted. What about

Re: [tor-dev] Git hosting changes, git:// support discontinued

2014-11-30 Thread Jason Cooper
On Sun, Nov 30, 2014 at 11:55:31PM +, Yawning Angel wrote: On Sun, 30 Nov 2014 17:32:05 -0500 Jason Cooper t...@lakedaemon.net wrote: It is unauthenticated and you probably shouldn't use it if at all possible. How does that matter? All of the tags are signed by Nick Mathewson.

Re: [tor-dev] Git hosting changes, git:// support discontinued

2014-11-30 Thread Yawning Angel
On Sun, 30 Nov 2014 19:19:58 -0500 Jason Cooper t...@lakedaemon.net wrote: On Sun, Nov 30, 2014 at 11:55:31PM +, Yawning Angel wrote: On Sun, 30 Nov 2014 17:32:05 -0500 Jason Cooper t...@lakedaemon.net wrote: It is unauthenticated and you probably shouldn't use it if at all

[tor-dev] Integration testing plans, draft, v1

2014-11-30 Thread Nick Mathewson
Hi! This is the outcome of some discussion I've had with dgoulet, and some work I've done at identifying current problem-points in our use of integration testing tools. I'm posting it here for initial feedback, and so I have a URL to link to in my monthly report. :)

Re: [tor-dev] Git hosting changes, git:// support discontinued

2014-11-30 Thread Sebastian Hahn
Hi Jason, On 30 Nov 2014, at 23:32, Jason Cooper t...@lakedaemon.net wrote: On Sun, Nov 30, 2014 at 06:48:09PM +0100, Sebastian Hahn wrote: Access via https:// has been provided for years, and should continue to work without any hiccups. No issue there for folks that prefer the extra layer.