[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #25935 [Core Tor/Tor]: Allow DA address to be specified as FQDN

#25935: Allow DA address to be specified as FQDN
--------------------------+------------------------------------
 Reporter:  somlo         |          Owner:  (none)
     Type:  enhancement   |         Status:  needs_revision
 Priority:  Medium        |      Milestone:  Tor: 0.3.5.x-final
Component:  Core Tor/Tor  |        Version:
 Severity:  Normal        |     Resolution:
 Keywords:  tor-dirauth   |  Actual Points:
Parent ID:                |         Points:
 Reviewer:  teor          |        Sponsor:
--------------------------+------------------------------------
Changes (by teor):

 * status:  needs_review => needs_revision
 * reviewer:   => teor


Comment:

 Please see my review on the pull request.

 Here is my major concern with this patch:

 > DNS queries provide a vector for a malicious directory authority to de-
 anonymise clients. So we might only want to allow domain name resolution
 in test networks, or networks which are using non-default authorities.
 >
 > When using default authorities, we should probably ban the use of DNS
 names

 For completeness, we might want to open another ticket for making the
 "ipv6" ORPort a hostname as well.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25935#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs