[tor-bugs] #5598 [Tor Relay]: Turn DynamicDHGroups off by default (was: Generate DH groups asynchronously when we change TLS keys)

[Tor Bug Tracker & Wiki]

#5598: Turn DynamicDHGroups off by default
-------------------------+--------------------------------------------------
 Reporter:  rransom      |          Owner:                    
     Type:  enhancement  |         Status:  new               
 Priority:  major        |      Milestone:  Tor: 0.2.3.x-final
Component:  Tor Relay    |        Version:                    
 Keywords:               |         Parent:                    
   Points:               |   Actualpoints:                    
-------------------------+--------------------------------------------------
Changes (by nickm):

  * milestone:  => Tor: 0.2.3.x-final


Comment:

 (To throw some numbers on the usability issue: with a few experiments, it
 stalls my heftiest box by 2-15 seconds.  It stalls my least hefty still-
 in-use laptop by 5-76 sec.)

 WRT the fingerprinting issue: using nonstandard keys is actually a
 downside, if we want blocked bridges to be able to change their IPs and
 become unblocked.

 (Changing the title back. If you want to do a different solution, please
 open a different ticket.)

-- 
Ticket URL: <https://trac.torproject.org:443/projects/tor/ticket/5598#comment:18>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online