[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #8542 [GetTor]: More options on how to get the bundles

#8542: More options on how to get the bundles
-------------------------+--------------------------------------------------
 Reporter:  mrphs        |          Owner:     
     Type:  enhancement  |         Status:  new
 Priority:  normal       |      Milestone:     
Component:  GetTor       |        Version:     
 Keywords:               |         Parent:     
   Points:               |   Actualpoints:     
-------------------------+--------------------------------------------------

Comment(by arma):

 Replying to [comment:3 sukhbir]:
 > So if we distribute it through HTTP and the censor blocks the URL, we
 can always get a new user ID and generate a new one.

 Hm. After thinking about it for a bit, I think we want to preemptively
 rotate the http urls more often. Otherwise the attacker can learn the URL
 and then watch for other people who fetch it -- including retroactively
 look through their network surveillance logs.

 Rotating once a minute, if it's used during that minute, should be a good
 enough balance between unpredictability and defense-against-DoS?

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/8542#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs