TORwallet (OP)
Newbie
 Offline
Activity: 41
Merit: 0
|
 |
June 27, 2012, 05:31:13 PM |
|
I know you meant that, and you are incorrect. The private key of the SSL certificate is stored on the .onion site, not on the torwallet.net server. Perhaps you should look closer at how socat works: it has the option to serve up its own certificate, but that is not in use here. It is simply concatenating data between ports 443 and 9050, in both directions.
I mean the private key of the SSL certificate of torwallet.net, not the SSL certificate of the .onion site ...... The SSL private key for torwallet.net is stored on the .onion server, and the .onion server does all the encryption and decryption. That's why it's a little slow; all the traffic must pass through tor first to get to and from the remote .onion server torwallet.net does not have a private key of its own stored on it or in use for it. This is exactly correct. We actually posted the incorrect socat command earlier so that may have led to some confusion. This is what we are actually using, pasted straight from the torwallet.net server. socat TCP4-LISTEN:443,fork,su=nobody,reuseaddr SOCKS4A:127.0.0.1:nci2szjrwjqw2zbi.onion:443,socksport=9050 The torwallet.net server does not decrypt the SSL session, it only forwards encrypted data between the .onion and the client. |
|
|
|
|
|
|
|
|
|
|
|
|
|
The grue lurks in the darkest places of the earth. Its favorite diet is adventurers, but its insatiable appetite is tempered by its fear of light. No grue has ever been seen by the light of day, and few have survived its fearsome jaws to tell the tale.
|
|
|
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
|
|
|
|
|
rjk
Sr. Member
Offline
Activity: 448
Merit: 250
1ngldh
|
|
June 27, 2012, 05:54:37 PM |
|
I made a helpful diagram just to be sure. Socat is capable of the same things that "stunnel" is, but is also capable of so much more. Whereas with Stunnel you would need to perform encryption and decryption on the public-facing server, as well as the internal server, you don't have to do that with Socat. (However you still have the option to.) Socat allows you to pass arbitrary binary data (read: SSL data) via a socket, which is important when you are dealing with encrypted data. Client --> Socat --> Tor Software --> Cloud of onions --> Tor Software --> apache/nginx/whatever --
^Still encrypted here ^de/encryption is here |
v Still encrypted here |
Client <-- Socat <-- Tor Software <-- Cloud of onions <-- Tor Software <--| And I thank torwallet.net for bringing this invaluable tool to my attention, because I had used stunnel in the past and this is just taking it to the next level. |
|
|
|
TORwallet (OP)
Newbie
Offline
Activity: 41
Merit: 0
|
|
June 28, 2012, 02:07:59 AM |
|
For all those who are concerned about leaking your TORwallet URL, we have now implemented an optional password feature. Once set the password will be required to send coins from the wallet.
|
|
|
|
|
byronbb
Legendary
Offline
Activity: 1414
Merit: 1000
HODL OR DIE
|
|
July 03, 2012, 10:23:09 PM |
|
You should consider an invoicing system akin to the one mtgox has developed with ability to charge in fiat.  |
|
|
|
|
ErebusBat
|
|
July 04, 2012, 04:07:15 AM |
|
You should consider an invoicing system akin to the one mtgox has developed with ability to charge in fiat. Cuz that won't get them shutdown at all. |
|
|
|
byronbb
Legendary
Offline
Activity: 1414
Merit: 1000
HODL OR DIE
|
|
July 04, 2012, 05:07:40 AM |
|
You should consider an invoicing system akin to the one mtgox has developed with ability to charge in fiat. Cuz that won't get them shutdown at all.  ? You mean like how Silk Road got shut down? |
|
|
|
Gladamas
Sr. Member
Offline
Activity: 294
Merit: 250
Bitcoin today is what the internet was in 1998.
|
|
July 04, 2012, 05:43:43 AM |
|
You mean like how Silk Road got shut down?
Silk road got shut down?  |
|
|
|
BadBear
v2.0
Legendary
Offline
Activity: 1652
Merit: 1127
|
|
July 04, 2012, 12:04:28 PM |
|
You mean like how Silk Road got shut down?
Silk road got shut down? No, that was his point  . |
|
|
|
|
levino
|
|
July 04, 2012, 01:08:53 PM |
|
3% is much too expensive. How about 0.01% per mix + the transaction costs? This will still be very profitable.
|
|
|
|
|
kangasbros
|
|
July 04, 2012, 01:41:33 PM |
|
3% is much too expensive. How about 0.01% per mix + the transaction costs? This will still be very profitable.
If it is still very profitable, create your own competing service... |
|
|
|
|
naima53
|
|
July 04, 2012, 06:06:54 PM |
|
You should consider an invoicing system akin to the one mtgox has developed with ability to charge in fiat. +1000 Make the exchange please B <-> LR and become a winner in this race exchanges! |
Donate me) 16f6iWHHkVEnDReeBQPT9GwCNwUfPTXrp2
|
|
|
TORwallet (OP)
Newbie
Offline
Activity: 41
Merit: 0
|
|
July 06, 2012, 12:30:05 AM |
|
What? We can display the USD value, but I don't see the point. Are you using torwallet as a receiving address for customer deposits? +1000 Make the exchange please B <-> LR and become a winner in this race exchanges! This is an interesting idea, however an exchange is significantly more complex than our service, and we do not feel that we can deal with the multitude of possible security threats that one experiences. If anyone does implement this and needs assistance please do contact us. |
|
|
|
|
byronbb
Legendary
Offline
Activity: 1414
Merit: 1000
HODL OR DIE
|
|
July 07, 2012, 06:54:23 PM |
|
You should consider an invoicing system akin to the one mtgox has developed with ability to charge in fiat.
What? We can display the USD value, but I don't see the point. Are you using torwallet as a receiving address for customer deposits? Pretty much yes. |
|
|
|
Gladamas
Sr. Member
Offline
Activity: 294
Merit: 250
Bitcoin today is what the internet was in 1998.
|
|
July 12, 2012, 04:11:45 PM |
|
Is Torwallet down? I can connect to torwallet.net (a different server), but I can't connect to the onion site, and https://torwallet.net/ returns a SSL error ( not a "certificate untrusted" error.) |
|
|
|
TORwallet (OP)
Newbie
Offline
Activity: 41
Merit: 0
|
|
July 12, 2012, 04:31:33 PM |
|
We are experiencing some issues with our tor server at the moment. Its not responding to its public IP address. There has been some rough weather in the area and a power outage. We believe that the UPS on the server may have ran dead before the power came back. One of us has to physically drive out to where the server is located and check on/reset it. Please give us a couple hours to get this resolved. Do not worry about your funds, we will be back.
|
|
|
|
|
TORwallet (OP)
Newbie
Offline
Activity: 41
Merit: 0
|
|
July 12, 2012, 07:09:29 PM |
|
We are back online. The server was off and did not turn itself back on after the UPS battery drained.
|
|
|
|
|
rjk
Sr. Member
Offline
Activity: 448
Merit: 250
1ngldh
|
|
July 12, 2012, 07:20:56 PM |
|
We are back online. The server was off and did not turn itself back on after the UPS battery drained.
Need moar generator |
|
|
|
marcus_of_augustus
Legendary
Offline
Activity: 3920
Merit: 2348
Eadem mutata resurgo
|
|
July 13, 2012, 09:48:40 PM |
|
We are experiencing some issues with our tor server at the moment. Its not responding to its public IP address. There has been some rough weather in the area and a power outage. We believe that the UPS on the server may have ran dead before the power came back. One of us has to physically drive out to where the server is located and check on/reset it. Please give us a couple hours to get this resolved. Do not worry about your funds, we will be back.
Probably not the best idea publishing time and cause of outage on a public forum. You just narrowed down the possible physical locations of your "hidden" server somewhat. |
|
|
|
|
ErebusBat
|
|
July 13, 2012, 10:20:00 PM |
|
We are experiencing some issues with our tor server at the moment. Its not responding to its public IP address. There has been some rough weather in the area and a power outage. We believe that the UPS on the server may have ran dead before the power came back. One of us has to physically drive out to where the server is located and check on/reset it. Please give us a couple hours to get this resolved. Do not worry about your funds, we will be back.
Probably not the best idea publishing time and cause of outage on a public forum. You just narrowed down the possible physical locations of your "hidden" server somewhat. Depending on who is searching i would say ALOT. Compared with other data or other side-channel attacks it might even be possible to find the IP. |
|
|
|
Gladamas
Sr. Member
Offline
Activity: 294
Merit: 250
Bitcoin today is what the internet was in 1998.
|
|
July 13, 2012, 10:46:12 PM |
|
We are experiencing some issues with our tor server at the moment. Its not responding to its public IP address. There has been some rough weather in the area and a power outage. We believe that the UPS on the server may have ran dead before the power came back. One of us has to physically drive out to where the server is located and check on/reset it. Please give us a couple hours to get this resolved. Do not worry about your funds, we will be back.
Probably not the best idea publishing time and cause of outage on a public forum. You just narrowed down the possible physical locations of your "hidden" server somewhat. +1. What I was thinking. |
|
|
|
|
