[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #20082 [Core Tor/Tor]: Lower initial descriptor upload delay for ephemeral services
#20082: Lower initial descriptor upload delay for ephemeral services
-------------------------------+------------------------------
Reporter: twim | Owner:
Type: enhancement | Status: new
Priority: Medium | Milestone: Tor: 0.2.???
Component: Core Tor/Tor | Version:
Severity: Normal | Resolution:
Keywords: tor-hs, research, | Actual Points:
Parent ID: | Points:
Reviewer: | Sponsor: SponsorR-can
-------------------------------+------------------------------
Comment (by twim):
Replying to [comment:3 dgoulet]:
> So indeed... why keep a delay at all for services? Descriptor
publication to a directory only happens once all intro points circuit are
ready and those are established at startup. If you think about it, it's
actually a very _specific_ pattern to detect a service startup. As a guard
you see 5 circuits being established at once (yes we need 3 IPs but we
launch 2 extras for better luck) then 2 of them dies quickly and you have
a 6th circuit almost 30 seconds after the initial launch of those... I'm
not saying that by removing that delay we'll make it go away but I really
don't see the point of the delay here to hide anything. Thus, I'm all for
_removing_ it unless armadev had a reason to add that delay :) 10 years
ago :).
Being more specific, this lower bound of 30s was introduced by commit
b3f846b313b3cf3191e3a9a54ec1c97227393d3d which reads:
{{{In very rare situations new hidden service descriptors were published
earlier than 30 seconds after the last change to the service, with the 30
seconds being the current voodoo saying that a descriptor is stable.}}}
So I don't see any reason to trust the voodoo and thus have this delay. :)
Also this delay makes it *more* distinguishable for a passive adversary
(ISP) whether a client just set up an onion service or not.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/20082#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs