[tor-relays] GoodBadISPs revamp?
Thomas White
thomaswhite at riseup.net
Mon Oct 13 07:37:40 UTC 2014
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
This of course would be part of the aim. If people can even just
suggest providers, we can get in touch with them (if we can get an
@torproject.org address for such things it'd be even better). Plus, if
we log communications with them we can try work together on convincing
hosts with additional assurances/information as needed. This means
we'll be adding more hosts who'll allow Tor and therefore great ISP
diversity.
As Roger pointed out, with people hopping between ISP's and not
challenging it when they are given troubles people are being forced
into a narrower pool every time.
Re: Tapping IXPs. This would not be difficult to do on a European
scale for example and I am quite sure GCHQ already has done this.
Almost every IXP in the UK is controlled by LINX so it only takes a
single compromise in them to control virtually all points between UK
backbones. I know the same is true also for the Netherlands, Sweden,
Germany and France. Unfortunately this is an infrastructure challenge
and really whilst it's great to have diversity, I think working around
IXP's is going to create an even greater bottleneck.
- -T
On 13/10/2014 08:13, Lunar wrote:
> Thomas White:
>> Anyone with access to create a new page on the list and we can
>> add subsections to a new page containing the dated responses from
>> each company on their policy towards Tor hosting.
>
> Sounds like a good idea but anybody working on this should keep in
> mind that diversity is crucial. Until we get better autonomous
> systems awareness in Tor path selection, I tend to sweat looking at
> the current situation:
> https://metrics.torproject.org/bubbles.html#as
>
> Almost all meaningful relays in a handful of networks means easier
> job for an adversary. Be it one of the big ISP, a collusion of
> several of these ISPs, or an agency taping Internet eXchange
> Point.
>
> Please aim for new providers. (Yes, it's going to be more
> expensive than OVH.)
>
>
>
> _______________________________________________ tor-relays mailing
> list tor-relays at lists.torproject.org
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (MingW32)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=OdDG
-----END PGP SIGNATURE-----
More information about the tor-relays
mailing list