[tbb-bugs] #23875 [Applications/Tor Browser]: Facebook's onion site is a single hop onion, but clicking on the Tor onion icon shows that it is a 6 hop circuit.
Tor Bug Tracker & Wiki
blackhole at torproject.org
Fri Feb 14 10:39:55 UTC 2020
#23875: Facebook's onion site is a single hop onion, but clicking on the Tor onion
icon shows that it is a 6 hop circuit.
------------------------------------------+-------------------------------
Reporter: Dbryrtfbcbhgf | Owner: tbb-team
Type: defect | Status: new
Priority: Medium | Milestone:
Component: Applications/Tor Browser | Version:
Severity: Normal | Resolution:
Keywords: tbb-circuit-display, ux-team | Actual Points:
Parent ID: | Points:
Reviewer: | Sponsor: Sponsor27-can
------------------------------------------+-------------------------------
Comment (by asn):
Replying to [comment:13 arma]:
> Replying to [comment:9 teor]:
> > That's not quite true: the service will advertise that it *tries* to
make one-hop circuits. But some circuits will be 3-hops if the rendezvous
point is unreachable or fails.
>
> teor has a great point here: we can't actually know how many hops the
service side circuit uses. So anything that we visualize for the user will
be a metaphor, not an accurate depiction of the onion service's circuit.
We don't know what the onion service is doing, and we can't know for sure,
and that's one of the security properties.
>
> So my vote remains for leaving it as it is, or if we want to change it,
to change it to some sort of "cloudy" thing that makes it clear we don't
have good visibility on that half of the path.
FWIW, v3 single onions actually specify they are single onions in the
descriptor:
https://github.com/torproject/torspec/blob/master/rend-spec-v3.txt#L1335
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/23875#comment:21>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tbb-bugs
mailing list