Secure connection between Conjure station and bridge
The Conjure station proxies TCP connections from clients to the deployed Conjure bridge (https://gitlab.torproject.org/tpo/anti-censorship/team/-/wikis/Survival-Guides/Conjure-Bridge). These connections are prepended with a plaintext PROXY header that contains the client's IP address. We're working with the CU Boulder team on securing this connection through the use of SSH tunnels or Wireguard.