[tor-bugs] #2286 [Tor Directory Authority]: We still use self-published relay bandwidth sometimes

[Tor Bug Tracker & Wiki]

#2286: We still use self-published relay bandwidth sometimes
-------------------------------------+--------------------------------------
 Reporter:  arma                     |          Owner:                    
     Type:  defect                   |         Status:  needs_review      
 Priority:  major                    |      Milestone:  Tor: 0.2.3.x-final
Component:  Tor Directory Authority  |        Version:                    
 Keywords:  arma-cares               |         Parent:                    
   Points:                           |   Actualpoints:                    
-------------------------------------+--------------------------------------

Comment(by arma):

 Replying to [comment:33 arma]:
 > Or maybe torflow is the wrong place to put that logic, and it should go
 in the Tor dir auth logic,

 Wherever we put it, what should the logic be? We could say "don't ever say
 Measured= unless you have opinions on >=50% of the Running relays you'll
 be voting about". That should be fine for normal operation, but is
 vulnerable to the "adversary floods network with new nodes to make bwauths
 stop saying Measured about anybody" attack.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/2286#comment:34>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online