[tor-bugs] #4923 [Tor Directory Authority]: badexiting certain bad countries by default

[Tor Bug Tracker & Wiki]

#4923: badexiting certain bad countries by default
-------------------------------------+--------------------------------------
 Reporter:  arma                     |          Owner:     
     Type:  enhancement              |         Status:  new
 Priority:  normal                   |      Milestone:     
Component:  Tor Directory Authority  |        Version:     
 Keywords:                           |         Parent:     
   Points:                           |   Actualpoints:     
-------------------------------------+--------------------------------------

Comment(by rransom):

 Replying to [comment:4 rransom]:
 > Replying to [comment:3 arma]:

 > > Why should only dirauths that vote on BadExit set the option? Is there
 some technical problem that happens if a different dirauth sets this
 option?
 >
 > At best, it would have no effect on those dirauths.  At worst, it would
 make them start voting on the BadExit flag, and against BadExiting all
 relays not in the specified countries.  (I should go RTFS.)

 `authdir_policy_badexit_address`'s result eventually finds its way into
 `node->is_bad_exit`, but only gets into the consensus if the dirauth is
 configured to vote on BadExit:
 {{{
   int listbadexits = options->AuthDirListBadExits;
 }}}
 {{{
   rs->is_bad_exit = listbadexits && node->is_bad_exit;
 }}}

 So, it would have no effect on those dirauths.

 I agree with rejecting (instead of BadExiting) relays in countries in
 which it is likely dangerous to be identified as a Tor user.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/4923#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online