[Whonix-devel] Bug#860721: please enable Tor2webMode compile time option

[Patrick Schleizer]

Package: tor
Severity: whishlist
X-Debbugs-CC: whonix-devel at whonix.org

Dear Maintainer,

please enable Tor2webMode compile time option.

# How?

Please add to debian/control dh_auto_configure

--enable-tor2web-mode

And in src/or/config.c change from

V(Tor2webMode,                 BOOL,     "0"),

to

V(Tor2webMode,                 BOOL,     "1"),

(Should that src/or/config.c change be moved upstream?)

That would allow one to use torrc option "Tor2webMode 1".

# Why?

This is useful on client machines in combination if the server is using
HiddenServiceSingleHopMode 1
HiddenServiceNonAnonymousMode 1

Then one can get secure, fast, free onion hostname, lan network
configuration independent, NAT traversal incoming ports. Very handy for
sys admins.

Otherwise compiling Tor oneself is rather time consuming. (Research and
typing all the commands, perhaps repeating all of that.)

# Security

"HiddenServiceSingleHopMode 1" and "HiddenServiceNonAnonymousMode 1" are
insecure options wrt anonymity, and these can be set by default. These
have clear descriptions in Tor manual that these are non-anonymous and
there is no way to accidentally set these options as these are not
mentioned in default /etc/tor/torrc.

Therefore please consider making "Tor2webMode 1" equally easy to use.

Cheers,
Patrick