[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-dev] Implications of openssl bug on directory authorities

To: tor-dev@xxxxxxxxxxxxxxxxxxxx
Subject: Re: [tor-dev] Implications of openssl bug on directory authorities
From: Nick Mathewson <nickm@xxxxxxxxxxxx>
Date: Wed, 9 Apr 2014 08:36:25 -0400
Delivered-to: archiver@xxxxxxxx
Delivery-date: Wed, 09 Apr 2014 08:36:40 -0400
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:content-type; bh=ZwjOr9jtXf3dKaraJlf8GkSFssL7M/i6hC75CoZ9Cak=; b=sxTX4YMaqPfn6RxuOCVvBzqHO/tI0o0bnZbGJc+0qanmGvW9dfXYZJnGxXPPMmn3+k HTUeVjzKABeI15J4LAPk6XlfSZ0QoRFtsMUbysqe8IF2BhZn+/9+DgTxm0L7lQX+GKCA GGOUalsRVJtwdUIW+wneReVdCq3AQ584B3wAzZzRBCHHKzjiosf4uJoqC9RyRJmlcRd3 HkjCrj+9bIHiWHUdXyGBGN6eTPbEl7+ctH0X6n5of9znqOE/bDR87saJprns5BLaVoeu upQ6SF3Sr9awcx+rvHu2bI45HAlAIarrcJLUEO2BLfhE321scblGE1/BOPGycp4Lr/KF gNog==
In-reply-to: <20140409094943.GM22584@xxxxxxxxxxxxxx>
List-archive: <http://lists.torproject.org/pipermail/tor-dev/>
List-help: <mailto:tor-dev-request@lists.torproject.org?subject=help>
List-id: discussion regarding Tor development <tor-dev.lists.torproject.org>
List-post: <mailto:tor-dev@lists.torproject.org>
List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev>, <mailto:tor-dev-request@lists.torproject.org?subject=subscribe>
List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-dev>, <mailto:tor-dev-request@lists.torproject.org?subject=unsubscribe>
References: <20140409094943.GM22584@xxxxxxxxxxxxxx>
Reply-to: tor-dev@xxxxxxxxxxxxxxxxxxxx
Sender: "tor-dev" <tor-dev-bounces@xxxxxxxxxxxxxxxxxxxx>

On Wed, Apr 9, 2014 at 5:49 AM, Roger Dingledine <arma@xxxxxxx> wrote:
 [...]
> Anybody have a plan 3?

Update the client and server code to explicitly blacklist the old
signing keys, and design a better key revocation mechanism for the
next time, in case there is a next time?

-- 
Nick
_______________________________________________
tor-dev mailing list
tor-dev@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev

Follow-Ups:
- Re: [tor-dev] Implications of openssl bug on directory authorities
  - From: Nick Mathewson

References:
- [tor-dev] Implications of openssl bug on directory authorities
  - From: Roger Dingledine

Prev by Author: [tor-dev] Proposal 231: Migrating authority RSA1024 identity keys
Next by Author: Re: [tor-dev] Implications of openssl bug on directory authorities
Previous by thread: [tor-dev] Implications of openssl bug on directory authorities
Next by thread: Re: [tor-dev] Implications of openssl bug on directory authorities
Index(es):
- Author
- Thread