[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #6790 [Tor Directory Authority]: Directory mirrors should accept, aggregate and hand off descriptors to dirauths
#6790: Directory mirrors should accept, aggregate and hand off descriptors to
dirauths
-------------------------------------+--------------------------------------
Reporter: mikeperry | Owner:
Type: enhancement | Status: new
Priority: normal | Milestone:
Component: Tor Directory Authority | Version:
Keywords: | Parent: #2664
Points: | Actualpoints:
-------------------------------------+--------------------------------------
Comment(by mikeperry):
Other thoughts: The aggreation/de-dupping step should also include the
usual orport tests done by the dirauths themselves, to reduce the burden
on the dirauths.
The other reason to prefer a push method is that we could simply re-use
the dirauth code that accepts descriptors currently, but relax it to allow
descriptors to come from any valid dir mirror currently listed in the
consensus.
If misbehaving dir mirrors begin participating in the DoS by submitting
unreachable or otherwise bogus unverified descriptors, they could be added
to the firewall or to de-listed in approved-routers in an ad-hoc fashion
by the dirauth operator.
It may also be the case that this would also allow misbehaving dir mirrors
to induce a form of portscan bounce through the dirauths by spoofing
descriptors, but the existing two-descriptor-per-IP limits should mitigate
that, I think.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/6790#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs