[tor-bugs] #25935 [Core Tor/Tor]: Allow DA address to be specified as FQDN
Tor Bug Tracker & Wiki
blackhole at torproject.org
Fri Apr 27 07:43:37 UTC 2018
#25935: Allow DA address to be specified as FQDN
--------------------------+------------------------------------
Reporter: somlo | Owner: (none)
Type: enhancement | Status: needs_revision
Priority: Medium | Milestone: Tor: 0.3.5.x-final
Component: Core Tor/Tor | Version:
Severity: Normal | Resolution:
Keywords: tor-dirauth | Actual Points:
Parent ID: | Points:
Reviewer: teor | Sponsor:
--------------------------+------------------------------------
Changes (by teor):
* status: needs_review => needs_revision
* reviewer: => teor
Comment:
Please see my review on the pull request.
Here is my major concern with this patch:
> DNS queries provide a vector for a malicious directory authority to de-
anonymise clients. So we might only want to allow domain name resolution
in test networks, or networks which are using non-default authorities.
>
> When using default authorities, we should probably ban the use of DNS
names
For completeness, we might want to open another ticket for making the
"ipv6" ORPort a hostname as well.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25935#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list