[tor-bugs] #25477 [Core Tor/Tor]: Stop warning users about bug #21018

["Tor Bug Tracker & Wiki" <blackhole@xxxxxxxxxxxxxx>]

#25477: Stop warning users about bug #21018
------------------------------+--------------------------------
     Reporter:  asn           |      Owner:  (none)
         Type:  defect        |     Status:  new
     Priority:  Medium        |  Milestone:  Tor: 0.3.4.x-final
    Component:  Core Tor/Tor  |    Version:
     Severity:  Normal        |   Keywords:  tor-hs tor-client
Actual Points:                |  Parent ID:
       Points:                |   Reviewer:
      Sponsor:                |
------------------------------+--------------------------------
 While working on #14389 we figured out that when a Tor client connects to
 an onion service with authorization without the proper authorization
 client config (or non-existent auth config), Tor will throw out 6 warnings
 like this:
 {{{
  [warn] Failed to parse introduction points. Either the service has
 published a corrupt descriptor or you have provided invalid authorization
 data, or (maybe!) the server is deliberately serving broken data in an
 attempt to crash you with bug 21018.
 }}}

 We should consider removing the alarmist warn about bug #21018 at some
 point, and maybe that point is now, since it might freak out users for no
 reason and there is no way for us to learn whether the attack took place.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25477>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs