[tor-bugs] #10887 [Pluggable transport]: ScrambleSuit should make it easy for bridge admins to learn password

[Tor Bug Tracker & Wiki]

#10887: ScrambleSuit should make it easy for bridge admins to learn password
-------------------------+-------------------------------------------------
     Reporter:  phw      |      Owner:  phw
         Type:           |     Status:  needs_information
  enhancement            |  Milestone:
     Priority:  normal   |    Version:
    Component:           |   Keywords:  scramblesuit, password, shared
  Pluggable transport    |  secret
   Resolution:           |  Parent ID:
Actual Points:           |
       Points:           |
-------------------------+-------------------------------------------------
Changes (by phw):

 * status:  new => needs_information
 * cc: asn (added)


Comment:

 As pointed out in the description, I believe that a reasonable solution
 would be to have a file `server_descriptor` in the directory
 `pt_state/scramblesuit/`.  It should be a ready-to-use descriptor such as:

 {{{
 Bridge scramblesuit 127.0.0.1:1234
 password=XBA76LNRO2DAQV4YDXSHOYL34L2EP5D2
 }}}

 However, we need to modify obfsproxy so that it writes the bind address
 (which it gets from pyptlib) to `TransportConfig()`.  I already have a
 patch for that.  Does that sound reasonable?  Are there better solutions?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10887#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online