[tor-bugs] #18319 [Core Tor/Tor]: Exclude relays that don't match pinned RSA/Ed key pairs

[Tor Bug Tracker & Wiki]

#18319: Exclude relays that don't match pinned RSA/Ed key pairs
-------------------------------------------------+-------------------------
 Reporter:  teor                                 |          Owner:  andrea
     Type:  defect                               |         Status:
                                                 |  assigned
 Priority:  High                                 |      Milestone:  Tor:
                                                 |  0.3.0.x-final
Component:  Core Tor/Tor                         |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  tor-ed25519-proto, nickm-            |  Actual Points:
  deferred-20160905                              |
Parent ID:                                       |         Points:  1
 Reviewer:                                       |        Sponsor:
                                                 |  SponsorU-can
-------------------------------------------------+-------------------------

Comment (by teor):

 Replying to [comment:24 nickm]:
 > Replying to [comment:23 teor]:
 > > '''Requiring Ed25519'''
 > >
 > > Also, what are we going to do about `DISABLE_DISABLING_ED25519`?
 > > It's currently `#undef`, which means that a relay can drop its ed25519
 key whenever it wants.
 > > When are we going to turn it on? When 0.2.5 is no longer recommended?
 >
 >
 > That sounds plausible to me.  Or another option would be to look at
 historical metrics data to see how often relays run a recent version for a
 while, then drop back to an older one.  If the answer is "almost never"
 then we can just turn it on now.

 Split off #20522. I'm in favour of doing it soon, because it makes key
 pinning consistent.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18319#comment:25>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online