I've revised the Mixminion directory specification to include a multiply-signed directory format, and a procedure for voting on a consensus directory. I'll be implementing this RSN, so I'd appreciate comments about how I can do this better, what I've missed, patches to clean up my prose, and so on. You can look at the latest version of dir-spec.txt in CVS, or go to http://mixminion.net/cvs/doc/spec/dir-spec.txt The most relevant sections are 4, 5, and 7, but you should review the other sections if you haven't looked at the spec in a while. This version of the voting protocol doesn't do any of the fancy things that I was thinking about before; those are far too clever to actually be right. Instead, it is basically: - Agree out-of-band on who is voting. - Decide what your vote is, and who you want to vote with. Sign it. - Get everybody else's signed vote. Compute what the result will be. Sign it. - Collect everybody else's signed result--the results should all be the same if nobody is borked; stick all the signatures you can find on a single copy of the result. Publish that. (The spec goes into way more detail, of course.) Yours, -- Nick Mathewson (PGP key will change on 15Aug2004; see http://wangafu.net/key.txt)
Attachment:
pgp00001.pgp
Description: PGP signature