[tor-bugs] #13837 [Core Tor/Tor]: Mitigate guard discovery by pinning middle node

[Tor Bug Tracker & Wiki]

#13837: Mitigate guard discovery by pinning middle node
-------------------------------------------------+-------------------------
 Reporter:  asn                                  |          Owner:
                                                 |  mikeperry
     Type:  defect                               |         Status:
                                                 |  needs_revision
 Priority:  Medium                               |      Milestone:  Tor:
                                                 |  0.3.3.x-final
Component:  Core Tor/Tor                         |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  tor-hs, tor-guard, guard-discovery-  |  Actual Points:
  prop247-controller                             |
Parent ID:  #9001                                |         Points:
 Reviewer:                                       |        Sponsor:
                                                 |  SponsorV-can
-------------------------------------------------+-------------------------

Comment (by mikeperry):

 Replying to [comment:23 asn]:
 > Furthermore, this feature seems to come with at least 3 (major) design
 changes:
 > - Adds extra hops to reduce linkability.
 > - Disables cannibalization.
 > - Disable prev hop path restriction.
 >
 > I wonder where's the best way to document these design changes. On the
 manual page? On a spec somewhere? Not sure.

 Unless I fucked up, all of these design changes should only apply when the
 option is enabled. The first one can be a manpage line. The second two are
 actually filed as bugs #23101 and #24487. I don't think they warrant much
 more than a changelog note, because I want them fixed in the 0.3.3 release
 cycle, if not in the very same 0.3.3 point release.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13837#comment:24>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online