After reading about Tor's authentication mechanisms based on cookies:
- https://stem.torproject.org/faq.html#i-m-using-cookie-authentication and
- https://stem.torproject.org/faq.html#i-m-using-safe-cookie-authentication
it looks to me that if an adversory has access to /home/atagar/.tor/control_auth_cookie
file, then the adversory can authenticate to Tor control. Is that correct? Am I missing something?
Thanks!
PS: That being said, in what environment would you use cookie authentication and where would you use safe-cookie authentication?