Proposal: Hidden Service Authentication

[Karsten Loesing]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi everyone,

we would like to propose an extension of Tor hidden services towards
providing authentication. This includes authentication at the hidden
service and at introduction points, both either via password or
public-key authentication.

This gives us the new security property of access control, improves
hiding service activity from unauthorized clients, and reduces traffic
by dropping false requests as soon as possible.

Comments are welcome! :)

- --Tobias, Thomas, Karsten, Ferdinand, and Christoph
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFG+mqt0M+WPffBEmURAjNyAKCyox0rlBwiygrNtI7PU2JrPQX/xgCfW3QK
V91+U7PrgcW+cIJYvUrt+BE=
=LyG0
-----END PGP SIGNATURE-----
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: hidden-service-authentication.txt
URL: <http://lists.torproject.org/pipermail/tor-dev/attachments/20070926/c9b7cc27/attachment.txt>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: hidden-service-authentication.txt.sig
Type: application/octet-stream
Size: 65 bytes
Desc: not available
URL: <http://lists.torproject.org/pipermail/tor-dev/attachments/20070926/c9b7cc27/attachment.obj>