[tor-bugs] #8673 [Flashproxy]: host a flashproxy-reg-url on s3.amazonaws.com

[Tor Bug Tracker & Wiki]

#8673: host a flashproxy-reg-url on s3.amazonaws.com
------------------------+---------------------------------------------------
 Reporter:  proper      |          Owner:  dcf
     Type:  task        |         Status:  new
 Priority:  normal      |      Milestone:     
Component:  Flashproxy  |        Version:     
 Keywords:              |         Parent:     
   Points:              |   Actualpoints:     
------------------------+---------------------------------------------------

Comment(by proper):

 Replying to [comment:1 dcf]:
 > I think perhaps the purpose of `flashproxy-reg-url` is not clear. The
 domain that the URL points to is ''not'' meant to be unblockable.

 I know. But, but would ever better if it was "unblockable" (by censor's
 own policy)? I mean, it would be easier for the user.

 > However it is interesting that Psiphon apparently uses S3 with success.

 > One of the potential rendezvous methods we discussed in the flash proxy
 service used such online storage servers, and there was even a prototype
 implementation:

 Ok, so my idea is not new.

 > I think it doesn't offer anything special for URL registrations, though.
 I could be wrong or misunderstand your request.

 As far I understand s3, it's just a server you can rent. Once someone
 connects to that domain, you know they're interested to get a flashproxy
 (you see the IP, because you rent the server). So users don't have to find
 out their external IP.

 > Even if you host a `flashproxy-reg-url` listener on S3, the user still
 needs to know their external address. That's what all that base64 in the
 URL encodes.

 My idea was, if users can access s3, you could get the IP of any user who
 connects, because it's your rented server.

 > Of course, anyone could host their own web server on S3, that just
 reflects requests to the main facilitator web server, and it would have
 the same effect.

 Yes. I think it would be a bit simpler, since this doesn't require to tell
 people "find a service like w3 validator who checks the url".

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/8673#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online