[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #3535 [Tor Client]: Relax IsolateDestAddr rules to handle hostname/ip distinction



#3535: Relax IsolateDestAddr rules to handle hostname/ip distinction
-------------------------+--------------------------------------------------
 Reporter:  nickm        |          Owner:  nickm             
     Type:  enhancement  |         Status:  accepted          
 Priority:  normal       |      Milestone:  Tor: 0.2.3.x-final
Component:  Tor Client   |        Version:                    
 Keywords:               |         Parent:  #1865             
   Points:               |   Actualpoints:                    
-------------------------+--------------------------------------------------

Comment(by arma):

 Replying to [comment:2 arma]:
 > > There may also be other circumstances like this, such as where
 hostname A and hostname B are both known to resolve to IP C.
 >
 > Open research question whether that's a good idea. So I think it should
 default to "no, keep those separate" until somebody gives us a better
 intuition.

 On more thought, I think it may be a bad idea. If DNS resolves were
 authenticated in some bulletproof way, it might be better. But they're
 not, and I can imagine an exit relay that hands back an IP address of a
 stream it wants you to mingle this new stream with. Best to leave Tor's
 internal remapping out of the picture and just use the addresses that the
 applications hand to Tor.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3535#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs