Hello everyone.To begin with i write a Server in Java (or maybe i will use an an existing more efficient you know), to serve a Hidden Service. With a few words i configure it so that it will accept TCP connections with a serverSocket only from localhost/127.0.0.1 on a port of my choosing. Below follows my setup of torcc file.
HiddenServicePort 9053 127.0.0.1:2096 PidFile pid RunAsDaemon 1 SafeSocks 1 SocksListenAddress 127.0.0.1 SocksPort 9020
My question now is and correct me if I'm wrong The HiddenServicePort directive tells tor on which port to listen, to forward to which ip and to which port and after that i go and bind a serversocket in that local port and i am waiting for connections. How secure is this? Do i need to establish an ssl in the local ServerSocket to make it more legit.