[tor-bugs] #18654 [Obfuscation/Snowflake]: Use TLS WebSockets (wss://) for proxy-to-server communication

[Tor Bug Tracker & Wiki]

#18654: Use TLS WebSockets (wss://) for proxy-to-server communication
-----------------------------------+---------------------
 Reporter:  dcf                    |          Owner:
     Type:  enhancement            |         Status:  new
 Priority:  Low                    |      Milestone:
Component:  Obfuscation/Snowflake  |        Version:
 Severity:  Normal                 |     Resolution:
 Keywords:                         |  Actual Points:
Parent ID:                         |         Points:
 Reviewer:                         |        Sponsor:
-----------------------------------+---------------------

Comment (by dcf):

 Replying to [comment:1 serene]:
 > Been updating a few things on my end -- when I visit
 keroserene.net/snowflake with https, snowflake doesn't work due to the
 lack of wss from proxy to server. While it's trivial to set the proxy
 javascript to use wss, we still also need to get the server plugin to
 accept that. How much time would it take to get TLS support on the server
 plugin?

 It's probably not too bad. This is the source file:
 https://gitweb.torproject.org/pluggable-
 transports/snowflake.git/tree/server/server.go

 You can probably copy the `startListenerTLS` and `listenTLS` functions
 from meek-server:
 https://gitweb.torproject.org/pluggable-transports/meek.git/tree/meek-
 server/meek-server.go?id=edc089e5af06eebf6a5b1d84d278082746a22c48#n306

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18654#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online