[BitTorrent] preventing unauthorized bittorrent peers?

Mike Ravkine krypt at mountaincable.net
Wed Jan 26 16:12:08 EST 2005

There's a few torrent sites that use a web login-based protection scheme.

The server makes the user authenticate via HTTP or some other scheme, 
then generates a token for a user's session and request, encoding it an 
announce URL of the form 
http://hostname:80/tracker/Ipybe1vH1zbS/announce.  This allows for a 
transition of state from the authenticated web session into a tracker 
communication session, if implemented correctly.


David Wilburn wrote:

>I have a funny security question regarding the bittorrent protocol that 
>I hope you will answer.

Yahoo! Groups Links

<*> To visit your group on the web, go to:

<*> To unsubscribe from this group, send an email to:
    BitTorrent-unsubscribe at yahoogroups.com

<*> Your use of Yahoo! Groups is subject to:

More information about the BitTorrent mailing list