[BitTorrent] preventing unauthorized bittorrent peers?

Mike Ravkine krypt at mountaincable.net
Wed Jan 26 16:12:08 EST 2005


There's a few torrent sites that use a web login-based protection scheme.

The server makes the user authenticate via HTTP or some other scheme, 
then generates a token for a user's session and request, encoding it an 
announce URL of the form 
http://hostname:80/tracker/Ipybe1vH1zbS/announce.  This allows for a 
transition of state from the authenticated web session into a tracker 
communication session, if implemented correctly.

--kRYPT

David Wilburn wrote:

>I have a funny security question regarding the bittorrent protocol that 
>I hope you will answer.
>[snip]...
>  
>




 
Yahoo! Groups Links

<*> To visit your group on the web, go to:
    http://groups.yahoo.com/group/BitTorrent/

<*> To unsubscribe from this group, send an email to:
    BitTorrent-unsubscribe at yahoogroups.com

<*> Your use of Yahoo! Groups is subject to:
    http://docs.yahoo.com/info/terms/
 





More information about the BitTorrent mailing list