[tor-bugs] #22889 [Core Tor/Tor]: Add "no peer authentication" to the list of client identification methods in tor-spec
Tor Bug Tracker & Wiki
blackhole at torproject.org
Wed Jul 12 00:22:18 UTC 2017
#22889: Add "no peer authentication" to the list of client identification methods
in tor-spec
------------------------------+--------------------------------
Reporter: teor | Owner:
Type: defect | Status: new
Priority: Medium | Milestone: Tor: 0.3.2.x-final
Component: Core Tor/Tor | Version:
Severity: Normal | Keywords: tor-spec
Actual Points: | Parent ID:
Points: | Reviewer:
Sponsor: |
------------------------------+--------------------------------
CREATE_FAST is no longer a reliable client discriminator:
{{{
If an OR sees a circuit created with CREATE_FAST, the OR is sure to be
the
first hop of a circuit. ORs SHOULD reject attempts to create streams
with
RELAY_BEGIN exiting the circuit at the first hop: letting Tor be used
as a
single hop proxy makes exit nodes a more attractive target for
compromise.
}}}
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22889>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list