[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #16845 [Core Tor/Tor]: make unverified consensus ISOTime accessible through Tor's ControlPort



#16845: make unverified consensus ISOTime accessible through Tor's ControlPort
-------------------------------------------------+-------------------------
 Reporter:  proper                               |          Owner:
     Type:  enhancement                          |         Status:
                                                 |  reopened
 Priority:  Medium                               |      Milestone:  Tor:
                                                 |  unspecified
Component:  Core Tor/Tor                         |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  tor-control needs-design maybe-bad-  |  Actual Points:
  idea                                           |
Parent ID:                                       |         Points:  medium
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------
Changes (by adrelanos):

 * status:  closed => reopened
 * resolution:  wontfix =>


Comment:

 This time information is supposed to be used for informational purposes
 and automated time comparison only. Not to set system clock from
 unverified consensus ISOTime, which would indeed not be secure.

 At boot time of Whonix / sdwdate would - if verified consensus ISOTime is
 not available - fall back to reading unverified consensus ISOTime. Then
 compare the result with the system clock. Use that guess inside sdwdate
 log and to inform the user what the issue with the system clock may likely
 be.

 (Usability / wording of that wouldn't be easy, but that's not something
 Tor needs to worry about.)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/16845#comment:7>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs