Relays could upload their descriptors to the authorities over 3-hop tor circuits, like hidden services do to hidden service directories. But that doesn't solve the core issue: Tor assumes all relays can connect to every other relay. If a relay can't reach the authorities, then that's 9 relays it can't reach, and it's likely that other relays are also blocked. We would need to answer the following questions before we allowed relays that can't reach the authorities to bootstrap: * how many other relays can each Tor relay reach at the moment? * what's the minimum number of relays each relay should be able to reach to be useful? * how can we check if a relay can reach that many relays? * should the relay do the check itself before it submits its descriptor, or should the authorities or bandwidth authorities do the check? This requires some research and security analysis. Tim Tim Wilson-Brown (teor) teor2345 at gmail dot com PGP 968F094B teor at blah dot im OTR CAD08081 9755866D 89E2A06F E3558B7F B5A9D14F |
Attachment:
signature.asc
Description: Message signed with OpenPGP using GPGMail
_______________________________________________ tor-relays mailing list tor-relays@xxxxxxxxxxxxxxxxxxxx https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays