Merge remote-tracking branch 'origin/maint-0.2.2'

Conflicts:
	src/or/control.c
This commit is contained in:
Nick Mathewson
2012-03-26 18:51:37 -04:00
4 changed files with 173 additions and 2 deletions
+9
View File
@@ -0,0 +1,9 @@
o Security Features:
- Provide controllers with a safer way to implement the cookie
authentication mechanism. With the old method, if another locally
running program could convince a controller that it was the Tor
process, then that program could trick the contoller into
telling it the contents of an arbitrary 32-byte file. The new
"SAFECOOKIE" authentication method uses a challenge-response
approach to prevent this. Fixes bug 5185, implements proposal 193.