[tor-bugs] #6676 [Tor Relay]: Nuke ‘MyFamily’

[Tor Bug Tracker & Wiki]

#6676: Nuke ‘MyFamily’
-----------------------+----------------------------------------------------
 Reporter:  rransom    |          Owner:                    
     Type:  task       |         Status:  new               
 Priority:  normal     |      Milestone:  Tor: 0.2.4.x-final
Component:  Tor Relay  |        Version:                    
 Keywords:             |         Parent:                    
   Points:             |   Actualpoints:                    
-----------------------+----------------------------------------------------

Comment(by cypherpunks):

 Replying to [ticket:6676 rransom]:
 >  * It is probably harmful for clients to refuse to use two relays
 operated by the same honest entity, and malicious relay operators will not
 use MyFamily honestly.

 I've the feeling that this ignores the fact that MyFamily is still useful
 even if only honest operators use it. Why is it useful even then? 0wning a
 honest relay operator likely gives you access to all of his relays (sooner
 or later). [Yes after owning them the attacker could remove their MyFamily
 setting but reconfiguring and reloading a relay hopefully would rise some
 suspicion]

 Or more generally: The probability to compromise relay A *and* B is higher
 if they are run by the same operator.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/6676#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online