After reading about Tor's authentication mechanisms based on cookies:
- https://stem.torproject.org/faq.html#i-m-using-cookie-authentication and
it looks to me that if an adversory has access to
/home/atagar/.tor/control_auth_cookie file, then the adversory can authenticate to Tor control. Is that correct? Am I missing something?
PS: That being said, in what environment would you use cookie authentication and where would you use safe-cookie authentication?