[tor-bugs] #7148 [Tor]: Even better parameter voting protocol

[Tor Bug Tracker & Wiki]

#7148: Even better parameter voting protocol
-------------------------------------+--------------------------------------
 Reporter:  nickm                    |          Owner:                    
     Type:  defect                   |         Status:  new               
 Priority:  major                    |      Milestone:  Tor: 0.2.4.x-final
Component:  Tor                      |        Version:                    
 Keywords:  tor-auth needs-proposal  |         Parent:                    
   Points:                           |   Actualpoints:                    
-------------------------------------+--------------------------------------
 Our current parameter voting protocol is backwards in how many voters need
 to exist for a parameter before we can vote for it.  Right now we accept
 the parameter into the consensus if it has a majority of all authorities,
 or at least 3 authorities.  But that fails when most authorities are
 abstaining: 3 rogue authorities could force the value of an unset
 parameter to whatever they want.

 A stopgap solution (for which roger is writing a ticket) is for all
 authorities to vote on all parameters, and to have most/all authorities
 begin voting on any new parameter before we release software that looks
 for it.

 But surely we can do better than that.

 We need to write a little proposal for this before the little-proposal
 deadline to implement it in 0.2.4.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/7148>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online