[tor-bugs] #31009 [Core Tor/Tor]: Tor lets transports advertise private IP addresses in descriptor

[Tor Bug Tracker & Wiki]

#31009: Tor lets transports advertise private IP addresses in descriptor
--------------------------+------------------------
 Reporter:  phw           |          Owner:  (none)
     Type:  defect        |         Status:  new
 Priority:  Medium        |      Milestone:
Component:  Core Tor/Tor  |        Version:
 Severity:  Normal        |     Resolution:
 Keywords:                |  Actual Points:
Parent ID:                |         Points:  0.5
 Reviewer:                |        Sponsor:
--------------------------+------------------------

Comment (by dcf):

 Replying to [comment:1 teor]:
 > Is there a TOR_PT_SERVER_ADVERTISEADDR in the PT spec?
 > If not, we should add one?

 That's not necessary--the PT doesn't need to know the advertised external
 address because it is not the thing that constructs the descriptor. All
 that a PT could do with that information is reflect it back to tor.

 A PT process isn't even required to honor the address (port number) in
 TOR_PT_SERVER_BINDADDR. tor may suggest that the PT use a particular
 address, but it is ultimately the PT that chooses and informs tor of the
 actual address in an SMETHOD line.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/31009#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online