[or-cvs] Note that you should not download by ID fingerprint.

[Nick Mathewson]

Update of /home/or/cvsroot/tor/doc
In directory moria:/tmp/cvs-serv15312/doc

Modified Files:
	dir-spec.txt 
Log Message:
Note that you should not download by ID fingerprint.

Index: dir-spec.txt
===================================================================
RCS file: /home/or/cvsroot/tor/doc/dir-spec.txt,v
retrieving revision 1.28
retrieving revision 1.29
diff -u -p -d -r1.28 -r1.29
--- dir-spec.txt	19 Dec 2005 08:08:57 -0000	1.28
+++ dir-spec.txt	22 Dec 2005 19:29:31 -0000	1.29
@@ -305,10 +305,15 @@ $Id$
    fingerprint of <F> should be available at:
       http://<hostname>/tor/server/fp/<F>.z
 
-   The most recent descriptors for servers with fingerprints <F1>,<F2>,<F3>
-   should be available at:
+   The most recent descriptors for servers with identity fingerprints
+   <F1>,<F2>,<F3> should be available at:
       http://<hostname>/tor/server/fp/<F1>+<F2>+<F3>.z
 
+   (NOTE: Implementations SHOULD NOT download descriptors by identity key
+   fingerprint. This allows a corrupted server (in collusion with a cache) to
+   provide a unique descriptor to a client, and thereby partition that client
+   from the rest of the network.)
+
    The descriptor for a server whose digest (in hex) is <D> should be
    available at:
       http://<hostname>/tor/server/d/<D>.z