[tor-bugs] #28295 [Core Tor/Nyx]: Non-interactive way to supply ControlPort password for nyx and tor-prompt is needed

[Tor Bug Tracker & Wiki]

#28295: Non-interactive way to supply ControlPort password for nyx and tor-prompt
is needed
--------------------------+------------------------------
 Reporter:  wagon         |          Owner:  atagar
     Type:  enhancement   |         Status:  assigned
 Priority:  Medium        |      Milestone:
Component:  Core Tor/Nyx  |        Version:  Tor: 0.3.4.8
 Severity:  Normal        |     Resolution:
 Keywords:                |  Actual Points:
Parent ID:                |         Points:
 Reviewer:                |        Sponsor:
--------------------------+------------------------------

Comment (by atagar):

 Oh oops. Thanks wagon, this is a good point, I did forget the controller
 password from the [https://nyx.torproject.org/index.html#configuration
 config options]. My bad.

 From a technical standpoint I'm unsure it's useful, since a persisted
 config password is effectively cookie authentication. Said another way, in
 authentication schemes a password is 'something you know' whereas cookie
 auth is 'something you have'. If you write your password into a text file
 it's just a poor man's cookie authentication.

 That said, this is likely to confuse others too so I should simply add it.
 Not sure when I'll get around to this (patches welcome), but I'll be sure
 it's included in the next release.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/28295#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online