[tor-bugs] #16558 [Tor]: DIr auths should vote about Invalid like they do about BadExit

[Tor Bug Tracker & Wiki]

#16558: DIr auths should vote about Invalid like they do about BadExit
------------------------+--------------------------------
     Reporter:  arma    |      Owner:
         Type:  defect  |     Status:  new
     Priority:  normal  |  Milestone:  Tor: 0.2.7.x-final
    Component:  Tor     |    Version:
   Resolution:          |   Keywords:  SponsorR, tor-hs
Actual Points:          |  Parent ID:  #16538
       Points:          |
------------------------+--------------------------------

Comment (by arma):

 One option is to have some dir auths just decide they won't vote about
 Valid (we add another config option just like AuthDirListBadExits). Then
 the decision about which relays get the Valid flag falls to a subset of
 the dir auths. Shazam, I think we're there.

 I worry though that some of the steps we've taken to de-fang non-Valid
 relays won't just magically come along there. For example, we withhold the
 HSDir flag if we withhold the Valid flag (#16524), but if 3 authorities
 vote about Valid, and two of them deciding to withhold Valid is enough for
 the relay to not be Valid, yet 7 of them remain voting yes on HSDir, then
 the relay will end up with the HSDir flag even if it doesn't have the
 Valid flag.

 One fix there would be to teach all Tors to pretend that the HSDir flag
 doesn't count if there isn't a Valid flag.

 Another fix would be to make a new consensus method that knows what's
 going on, and everybody agrees that if the consensus is going to say this
 relay isn't Valid, then the consensus should also say that the relay isn't
 HSDir, isn't Guard, etc. This fix seems more likely to be done right.

 Other options?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/16558#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online