[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #7870 [Tor]: Retry on a new circuit for more reasons.

#7870: Retry on a new circuit for more reasons.
-------------------------+-------------------------------------------------
     Reporter:  arma     |      Owner:
         Type:  defect   |     Status:  needs_revision
     Priority:  major    |  Milestone:  Tor: 0.2.6.x-final
    Component:  Tor      |    Version:
   Resolution:           |   Keywords:  tor-client, 025-backport,
Actual Points:           |  026-triaged-0, nickm-patch, andrea-review
       Points:           |  Parent ID:
-------------------------+-------------------------------------------------
Changes (by mikeperry):

 * status:  needs_review => needs_revision


Comment:

 I believe that this change is unsafe for Tor Browser - it enables a
 website to include content elements that continually sends TCP resets
 which will cause the client to retry on new circuits until the point where
 a middle node is selected that enables guard discovery. See also #13669.

 I would suggest a limit on the number of retries, but really, any number
 of automatic retries on a new circuit is bad for the web. A web page gets
 to include as many content elements as it likes, so even if each one is
 limited to one retry, you can still perform guard discovery with lots of
 them :/.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/7870#comment:18>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs