[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #22862 [Core Tor/Tor]: tor-spec doesn't say how clients authenticate authorities or fallback directories
#22862: tor-spec doesn't say how clients authenticate authorities or fallback
directories
--------------------------+------------------------------------
Reporter: teor | Owner:
Type: defect | Status: new
Priority: Medium | Milestone: Tor: 0.3.2.x-final
Component: Core Tor/Tor | Version: Tor: unspecified
Severity: Normal | Resolution:
Keywords: | Actual Points:
Parent ID: | Points: 0.2
Reviewer: | Sponsor:
--------------------------+------------------------------------
Description changed by teor:
Old description:
> {{{
> In all handshake variants, once all certificates are exchanged, all
> parties receiving certificates must confirm that the identity key is
> as
> expected. (When initiating a connection, the expected identity key
> is
> - the one given in the directory; when creating a connection because
> of an
> + during bootstrap: the one given in the hard-coded authority or
> fallback list,
> + after bootstrap: the one in the directory; when creating a
> connection because of an
> EXTEND cell, the expected identity key is the one given in the cell.)
> If
> the key is not as expected, the party must close the connection.
> }}}
New description:
{{{
In all handshake variants, once all certificates are exchanged, all
parties receiving certificates must confirm that the identity key is
as
expected. (When initiating a connection, the expected identity key
is
- the one given in the directory; when creating a connection because of
an
+ during bootstrap: the one given in the hard-coded authority or
fallback list,
+ after bootstrap: the one in the directory; when creating a connection
because of an
EXTEND cell, the expected identity key is the one given in the cell.)
If
the key is not as expected, the party must close the connection.
}}}
--
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22862#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs