November 2012 - tor-commits - lists.torproject.org

[ooni-probe/master] Merge branch 'daphn3port'
by art＠torproject.org 12 Nov '12

12 Nov '12

commit c3f55b7af8d2294a86c953abb6fe0a71f4015d17 Merge: cfab60a 0457513 Author: Arturo Filastò <art(a)fuffa.org> Date: Mon Nov 12 20:13:48 2012 +0100 Merge branch 'daphn3port' * daphn3port: Add unittest for daphn3 mutator. Finish reafactoring and porting daphn3. * XXX not fully tested Progress towards making daphn3 a test helper backend Port daphn3 to be a kit Progress on porting daph3 to new API. The client component Make nettest take a filename instead of a file Trap exceptions that get raised when running tests Add exception logging method Trap exceptions properly in input unit Start rewriting daphn3 Start working on porting of daphn3 nettests/core/daphn3.py | 131 ++++++++++++++++ ooni/kit/daphn3.py | 208 +++++++++++++++++++++++++ ooni/utils/log.py | 6 + oonib/config.py | 5 +- oonib/oonibackend.py | 8 +- oonib/testhelpers/daphn3.py | 47 ------ oonib/testhelpers/tcp_helpers.py | 60 +++++++- tests/test_mutate.py | 15 ++ to-be-ported/old-api/daphn3.py | 152 ------------------- to-be-ported/protocols/daphn3.py | 311 -------------------------------------- 10 files changed, 425 insertions(+), 518 deletions(-)

1 0

[ooni-probe/master] Progress on porting daph3 to new API. The client component
by art＠torproject.org 12 Nov '12

12 Nov '12

commit 1ca2705d208febeea2e8cc400929c170fd875327 Author: Arturo Filastò <art(a)fuffa.org> Date: Mon Nov 12 09:48:08 2012 +0100 Progress on porting daph3 to new API. The client component --- nettests/core/daphn3.py | 122 ++++++++++++++++++++++------------------------- 1 files changed, 57 insertions(+), 65 deletions(-) diff --git a/nettests/core/daphn3.py b/nettests/core/daphn3.py index ed65963..cc4803c 100644 --- a/nettests/core/daphn3.py +++ b/nettests/core/daphn3.py @@ -1,47 +1,33 @@ +# -*- encoding: utf-8 -*- from twisted.python import usage from twisted.internet import protocol, endpoints, reactor +from ooni import nettest from ooni.kit import daphn3 from ooni.utils import log -class Daphn3ClientProtocol(daphn3.Daphn3Protocol): - def connectionMade(self): - self.next_state() - class Daphn3ClientFactory(protocol.ClientFactory): - protocol = Daphn3ClientProtocol - mutator = None - steps = None - test = None + protocol = daphn3.Daphn3Protocol + def __init__(self, steps): + self.steps = steps def buildProtocol(self, addr): - p = self.protocol() + p = self.protocol(steps=self.steps) p.factory = self - p.test = self.test - - if self.steps: - p.steps = self.steps - - if not self.mutator: - self.mutator = daphn3.Mutator(p.steps) + return p - else: - print "Moving on to next mutation" - self.mutator.next() + def startedConnecting(self, connector): + print "Started connecting %s" % connector - p.mutator = self.mutator - p.current_state = self.mutator.state() - return p + def clientConnectionFailed(self, reason, connector): + log.err("We failed connecting the the OONIB") + log.err("Cannot perform test. Perhaps it got blocked?") + log.err("Please report this to tor-assistants(a)torproject.org") - def clientConnectionFailed(self, reason): - print "We failed connecting the the OONIB" - print "Cannot perform test. Perhaps it got blocked?" - print "Please report this to tor-assistants(a)torproject.org" - self.test.result['error'] = ('Failed in connecting to OONIB', reason) - self.test.end(d) + def clientConnectionLost(self, reason, connector): + log.err("Daphn3 client connection lost") + print reason - def clientConnectionLost(self, reason): - print "Connection Lost." class daphn3Args(usage.Options): optParameters = [ @@ -58,57 +44,63 @@ class daphn3Test(nettest.NetTestCase): inputFile = ['file', 'f', None, 'Specify the pcap or YAML file to be used as input to the test'] - requiredOptions = ['file'] + #requiredOptions = ['file'] steps = None def inputProcessor(self, fp): - if self.localOptions['pcap']: - self.steps = daphn3.read_pcap(self.localOptions['pcap']) - else: - self.steps = daphn3.read_yaml(self.localOptions['yaml']) + """ + step_idx is the step in the packet exchange + ex. + [.X.] are packets sent by a client or a server - def setUp(self): - self.factory = Daphn3ClientFactory() - self.factory.test = self + client: [.1.] [.3.] [.4.] + server: [.2.] [.5.] + mutation_idx: is the sub index of the packet as in the byte of the + packet at the step_idx that is to be mutated + + """ if self.localOptions['pcap']: - self.steps = daphn3.read_pcap(self.localOptions['pcap']) + daphn3Steps = daphn3.read_pcap(self.localOptions['pcap']) elif self.localOptions['yaml']: - self.steps = daphn3.read_yaml(self.localOptions['yaml']) + daphn3Steps = daphn3.read_yaml(self.localOptions['yaml']) else: - raise usage.UsageError("You must specify either --pcap or --yaml") - - mutations = 0 - for x in self.steps: - mutations += len(x['data']) - return {'mutation': range(mutations)} + daphn3Steps = [{'client': 'testing'}, {'server': 'antani'}] + + for idx, step in enumerate(daphn3Steps): + current_packet = step.values()[0] + for mutation_idx in range(len(current_packet)): + if step.keys()[0] == "client": + mutated_step = daphn3.daphn3Mutate(daphn3Steps, + idx, mutation_idx) + yield mutated_step + else: + yield daphn3Steps - def control(self, exp_res, args): - try: - mutation = self.factory.mutator.get(0) - self.result['censored'] = False - except: - mutation = None + def setUp(self): + self.factory = Daphn3ClientFactory(self.input) + self.factory.report = self.report + print "Just set the factory to %s with %s" % (self.factory, + self.input) - return {'mutation_number': args['mutation'], - 'value': mutation} + def test_daphn3(self): + host = self.localOptions['host'] + port = int(self.localOptions['port']) - def _failure(self, *argc, **kw): - self.report['censored'] = True - self.report['mutation'] = - self.report['error'] = ('Failed in connecting', (argc, kw)) + def failure(failure): + log.msg("Failed to connect") + self.report['censored'] = True + self.report['mutation'] = 0 - def test_daphn3(self): - log.msg("Doing mutation %s" % args['mutation']) - self.factory.steps = self.steps + def success(protocol): + log.msg("Successfully connected") + protocol.sendMutation() - host = self.local_options['host'] - port = int(self.local_options['port']) log.msg("Connecting to %s:%s" % (host, port)) - endpoint = endpoints.TCP4ClientEndpoint(reactor, host, port) d = endpoint.connect(self.factory) - d.addErrback(self._failure) + d.addErrback(failure) + d.addCallback(success) return d

1 0

[ooni-probe/master] Progress towards making daphn3 a test helper backend
by art＠torproject.org 12 Nov '12

12 Nov '12

commit f6518458a187a97e59539e42a5f4df8db1ba89a6 Author: Arturo Filastò <art(a)fuffa.org> Date: Mon Nov 12 09:49:51 2012 +0100 Progress towards making daphn3 a test helper backend --- oonib/config.py | 1 - oonib/oonibackend.py | 2 +- oonib/testhelpers/tcp_helpers.py | 31 ++++++------------------------- 3 files changed, 7 insertions(+), 27 deletions(-) diff --git a/oonib/config.py b/oonib/config.py index b34a8ae..cf2e362 100644 --- a/oonib/config.py +++ b/oonib/config.py @@ -29,7 +29,6 @@ helpers.tcp_echo.port = 57002 helpers.daphn3 = Storage() helpers.daphn3.yaml_file = "/path/to/data/oonib/daphn3.yaml" helpers.daphn3.pcap_file = "/path/to/data/server.pcap" - helpers.daphn3.port = 57003 helpers.dns = Storage() diff --git a/oonib/oonibackend.py b/oonib/oonibackend.py index 4dced2a..937f223 100644 --- a/oonib/oonibackend.py +++ b/oonib/oonibackend.py @@ -53,7 +53,7 @@ if config.helpers.dns.udp_port: # XXX this needs to be ported # Start the OONI daphn3 backend -if config.main.daphn3_port: +if config.helpers.daphn3.port: daphn3_helper = internet.TCPServer(int(config.helpers.daphn3.port), tcp_helpers.Daphn3Server()) daphn3_helper.setServiceParent(serviceCollection) diff --git a/oonib/testhelpers/tcp_helpers.py b/oonib/testhelpers/tcp_helpers.py index 551e880..4287a59 100644 --- a/oonib/testhelpers/tcp_helpers.py +++ b/oonib/testhelpers/tcp_helpers.py @@ -4,7 +4,7 @@ from twisted.internet.error import ConnectionDone from oonib import config -from ooni.kit.daphn3 import Mutator, Daphn3Protocol +from ooni.kit.daphn3 import Daphn3Protocol from ooni.kit.daphn3 import read_pcap, read_yaml class TCPEchoProtocol(Protocol): @@ -17,6 +17,9 @@ class TCPEchoHelper(Factory): """ protocol = TCPEchoProtocol +daphn3Steps = [{'client': '\x00\x00\x00'}, + {'server': '\x00\x00\x00'}] + class Daphn3Server(ServerFactory): """ This is the main class that deals with the daphn3 server side component. @@ -27,31 +30,9 @@ class Daphn3Server(ServerFactory): probability of such thing is not that likely. """ protocol = Daphn3Protocol - mutations = {} def buildProtocol(self, addr): - p = self.protocol() + p = self.protocol(steps=daphn3Steps, + role="server") p.factory = self - - if config.daphn3.yaml_file: - steps = read_yaml(config.daphn3.yaml_file) - elif config.daphn3.pcap_file: - steps = read_pcap(config.daphn3.pcap_file) - else: - print "Error! No PCAP, nor YAML file provided." - steps = None - - p.factory.steps = steps - - if addr.host not in self.mutations: - self.mutations[addr.host] = Mutator(p.steps) - else: - print "Moving on to next mutation" - if not self.mutations[addr.host].next(): - self.mutations.pop(addr.host) - try: - p.mutator = self.mutations[addr.host] - p.current_state = p.mutator.state() - except: - pass return p

1 0

[translation/vidalia_alpha_completed] Update translations for vidalia_alpha_completed
by translation＠torproject.org 12 Nov '12

12 Nov '12

commit 025a922d9175bea931558e95f687a0e0cdebb524 Author: Translation commit bot <translation(a)torproject.org> Date: Mon Nov 12 18:45:22 2012 +0000 Update translations for vidalia_alpha_completed --- es/vidalia_es.po | 6 +++--- 1 files changed, 3 insertions(+), 3 deletions(-) diff --git a/es/vidalia_es.po b/es/vidalia_es.po index e9848ea..bd356b4 100644 --- a/es/vidalia_es.po +++ b/es/vidalia_es.po @@ -9,7 +9,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: https://trac.torproject.org/projects/tor\n" "POT-Creation-Date: 2012-03-21 17:46+0000\n" -"PO-Revision-Date: 2012-11-12 18:05+0000\n" +"PO-Revision-Date: 2012-11-12 18:45+0000\n" "Last-Translator: strel <strelnic(a)gmail.com>\n" "Language-Team: Spanish (http://www.transifex.com/projects/p/torproject/language/es/)\n" "MIME-Version: 1.0\n" @@ -2593,11 +2593,11 @@ msgstr "Mi cortafuegos (firewall) sólo me permite conectarme a ciertos puertos" msgctxt "NetworkPage" msgid "Firewall Settings" -msgstr "Configuración del Cortafuegos (firewall)" +msgstr "Configuración en el Cortafuegos (firewall)" msgctxt "NetworkPage" msgid "Allowed Ports:" -msgstr "Puertos permitidos:" +msgstr "Puertos a usar permitidos en el cortafuegos:" msgctxt "NetworkPage" msgid "80, 443"

1 0

[translation/vidalia_alpha] Update translations for vidalia_alpha
by translation＠torproject.org 12 Nov '12

12 Nov '12

commit bf51a4208aedd885083a35d743d671d2ed5cb0a2 Author: Translation commit bot <translation(a)torproject.org> Date: Mon Nov 12 18:45:19 2012 +0000 Update translations for vidalia_alpha --- es/vidalia_es.po | 6 +++--- 1 files changed, 3 insertions(+), 3 deletions(-) diff --git a/es/vidalia_es.po b/es/vidalia_es.po index e9848ea..bd356b4 100644 --- a/es/vidalia_es.po +++ b/es/vidalia_es.po @@ -9,7 +9,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: https://trac.torproject.org/projects/tor\n" "POT-Creation-Date: 2012-03-21 17:46+0000\n" -"PO-Revision-Date: 2012-11-12 18:05+0000\n" +"PO-Revision-Date: 2012-11-12 18:45+0000\n" "Last-Translator: strel <strelnic(a)gmail.com>\n" "Language-Team: Spanish (http://www.transifex.com/projects/p/torproject/language/es/)\n" "MIME-Version: 1.0\n" @@ -2593,11 +2593,11 @@ msgstr "Mi cortafuegos (firewall) sólo me permite conectarme a ciertos puertos" msgctxt "NetworkPage" msgid "Firewall Settings" -msgstr "Configuración del Cortafuegos (firewall)" +msgstr "Configuración en el Cortafuegos (firewall)" msgctxt "NetworkPage" msgid "Allowed Ports:" -msgstr "Puertos permitidos:" +msgstr "Puertos a usar permitidos en el cortafuegos:" msgctxt "NetworkPage" msgid "80, 443"

1 0

[translation/vidalia_alpha_completed] Update translations for vidalia_alpha_completed
by translation＠torproject.org 12 Nov '12

12 Nov '12

commit c4b95d9513a5a697c99c9a390b2100a7ffe23bce Author: Translation commit bot <translation(a)torproject.org> Date: Mon Nov 12 18:15:21 2012 +0000 Update translations for vidalia_alpha_completed --- es/vidalia_es.po | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) diff --git a/es/vidalia_es.po b/es/vidalia_es.po index 910cc92..e9848ea 100644 --- a/es/vidalia_es.po +++ b/es/vidalia_es.po @@ -9,7 +9,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: https://trac.torproject.org/projects/tor\n" "POT-Creation-Date: 2012-03-21 17:46+0000\n" -"PO-Revision-Date: 2012-11-12 17:20+0000\n" +"PO-Revision-Date: 2012-11-12 18:05+0000\n" "Last-Translator: strel <strelnic(a)gmail.com>\n" "Language-Team: Spanish (http://www.transifex.com/projects/p/torproject/language/es/)\n" "MIME-Version: 1.0\n" @@ -2585,7 +2585,7 @@ msgstr "Puerto:" msgctxt "NetworkPage" msgid "Check to only connect to relays using ports allowed by your firewall" -msgstr "Marque para conectarse sólo con repetidores (relays) que usen puertos permitidos por su cortafuegos (firewall)" +msgstr "Marque para conectarse sólo con repetidores (relays) que usen puertos permitidos por su cortafuegos" msgctxt "NetworkPage" msgid "My firewall only lets me connect to certain ports"

1 0

[translation/vidalia_alpha] Update translations for vidalia_alpha
by translation＠torproject.org 12 Nov '12

12 Nov '12

commit b74134c0ec2d0f7e691f32587128e8206d75faf7 Author: Translation commit bot <translation(a)torproject.org> Date: Mon Nov 12 18:15:18 2012 +0000 Update translations for vidalia_alpha --- es/vidalia_es.po | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) diff --git a/es/vidalia_es.po b/es/vidalia_es.po index 910cc92..e9848ea 100644 --- a/es/vidalia_es.po +++ b/es/vidalia_es.po @@ -9,7 +9,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: https://trac.torproject.org/projects/tor\n" "POT-Creation-Date: 2012-03-21 17:46+0000\n" -"PO-Revision-Date: 2012-11-12 17:20+0000\n" +"PO-Revision-Date: 2012-11-12 18:05+0000\n" "Last-Translator: strel <strelnic(a)gmail.com>\n" "Language-Team: Spanish (http://www.transifex.com/projects/p/torproject/language/es/)\n" "MIME-Version: 1.0\n" @@ -2585,7 +2585,7 @@ msgstr "Puerto:" msgctxt "NetworkPage" msgid "Check to only connect to relays using ports allowed by your firewall" -msgstr "Marque para conectarse sólo con repetidores (relays) que usen puertos permitidos por su cortafuegos (firewall)" +msgstr "Marque para conectarse sólo con repetidores (relays) que usen puertos permitidos por su cortafuegos" msgctxt "NetworkPage" msgid "My firewall only lets me connect to certain ports"

1 0

[translation/vidalia_alpha_completed] Update translations for vidalia_alpha_completed
by translation＠torproject.org 12 Nov '12

12 Nov '12

commit 95ba114bdb04b7faeff110d4d55cf9422f5a5234 Author: Translation commit bot <translation(a)torproject.org> Date: Mon Nov 12 17:45:22 2012 +0000 Update translations for vidalia_alpha_completed --- es/vidalia_es.po | 8 ++++---- 1 files changed, 4 insertions(+), 4 deletions(-) diff --git a/es/vidalia_es.po b/es/vidalia_es.po index b6910a1..910cc92 100644 --- a/es/vidalia_es.po +++ b/es/vidalia_es.po @@ -9,7 +9,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: https://trac.torproject.org/projects/tor\n" "POT-Creation-Date: 2012-03-21 17:46+0000\n" -"PO-Revision-Date: 2012-11-12 17:14+0000\n" +"PO-Revision-Date: 2012-11-12 17:20+0000\n" "Last-Translator: strel <strelnic(a)gmail.com>\n" "Language-Team: Spanish (http://www.transifex.com/projects/p/torproject/language/es/)\n" "MIME-Version: 1.0\n" @@ -2585,11 +2585,11 @@ msgstr "Puerto:" msgctxt "NetworkPage" msgid "Check to only connect to relays using ports allowed by your firewall" -msgstr "Marque para conectarse sólo con repetidores (relays) que usen puertos permitidos por la configuración de su cortafuegos" +msgstr "Marque para conectarse sólo con repetidores (relays) que usen puertos permitidos por su cortafuegos (firewall)" msgctxt "NetworkPage" msgid "My firewall only lets me connect to certain ports" -msgstr "Mi cortafuegos sólo me permite conectarme a ciertos puertos" +msgstr "Mi cortafuegos (firewall) sólo me permite conectarme a ciertos puertos" msgctxt "NetworkPage" msgid "Firewall Settings" @@ -2597,7 +2597,7 @@ msgstr "Configuración del Cortafuegos (firewall)" msgctxt "NetworkPage" msgid "Allowed Ports:" -msgstr "Puertos Permitidos:" +msgstr "Puertos permitidos:" msgctxt "NetworkPage" msgid "80, 443"

1 0

[translation/vidalia_alpha] Update translations for vidalia_alpha
by translation＠torproject.org 12 Nov '12

12 Nov '12

commit 3dc8ab014421a3fc2797b0e03e223959d125a581 Author: Translation commit bot <translation(a)torproject.org> Date: Mon Nov 12 17:45:18 2012 +0000 Update translations for vidalia_alpha --- es/vidalia_es.po | 8 ++++---- 1 files changed, 4 insertions(+), 4 deletions(-) diff --git a/es/vidalia_es.po b/es/vidalia_es.po index b6910a1..910cc92 100644 --- a/es/vidalia_es.po +++ b/es/vidalia_es.po @@ -9,7 +9,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: https://trac.torproject.org/projects/tor\n" "POT-Creation-Date: 2012-03-21 17:46+0000\n" -"PO-Revision-Date: 2012-11-12 17:14+0000\n" +"PO-Revision-Date: 2012-11-12 17:20+0000\n" "Last-Translator: strel <strelnic(a)gmail.com>\n" "Language-Team: Spanish (http://www.transifex.com/projects/p/torproject/language/es/)\n" "MIME-Version: 1.0\n" @@ -2585,11 +2585,11 @@ msgstr "Puerto:" msgctxt "NetworkPage" msgid "Check to only connect to relays using ports allowed by your firewall" -msgstr "Marque para conectarse sólo con repetidores (relays) que usen puertos permitidos por la configuración de su cortafuegos" +msgstr "Marque para conectarse sólo con repetidores (relays) que usen puertos permitidos por su cortafuegos (firewall)" msgctxt "NetworkPage" msgid "My firewall only lets me connect to certain ports" -msgstr "Mi cortafuegos sólo me permite conectarme a ciertos puertos" +msgstr "Mi cortafuegos (firewall) sólo me permite conectarme a ciertos puertos" msgctxt "NetworkPage" msgid "Firewall Settings" @@ -2597,7 +2597,7 @@ msgstr "Configuración del Cortafuegos (firewall)" msgctxt "NetworkPage" msgid "Allowed Ports:" -msgstr "Puertos Permitidos:" +msgstr "Puertos permitidos:" msgctxt "NetworkPage" msgid "80, 443"

1 0

[tor-design-2012/master] Add discussion of bridges, censorship resistance, and pluggable transports
by sjm217＠torproject.org 12 Nov '12

12 Nov '12

commit 1ca57049a6858a4efb2baa14cf31e4a874b9e4ec Author: Steven Murdoch <Steven.Murdoch(a)cl.cam.ac.uk> Date: Mon Nov 12 17:24:07 2012 +0000 Add discussion of bridges, censorship resistance, and pluggable transports --- todo | 2 +- tor-design-2012.tex | 39 +++++++++++++++++++++++++++++++++++++++ 2 files changed, 40 insertions(+), 1 deletions(-) diff --git a/todo b/todo index 3c4e430..ac44c7f 100644 --- a/todo +++ b/todo @@ -19,7 +19,7 @@ ITEMS: o Cell queueing and scheduling. . Integrate content from the second blog post [steven] o guard nodes - - Bridges, censorship resistance, and pluggable transports + o Bridges, censorship resistance, and pluggable transports - Changes and complexities in our path selection algorithms o stream isolation . Integrate content from the third blog post [steven] diff --git a/tor-design-2012.tex b/tor-design-2012.tex index d163891..2f48cbb 100644 --- a/tor-design-2012.tex +++ b/tor-design-2012.tex @@ -1953,6 +1953,45 @@ in source code form, encourage source audits, and frequently warn our users never to trust any software (even from us) that comes without source.\\ +\emph{Block access to the network.} An attacker who controls a +user's Internet connection can block access to the Tor network +by blocking connections to the directory authorities and/or Tor +nodes. The IP addresses of the former are embedded in every copy +of Tor and the IP addresses of the latter can be easily found by +asking the directory authorities. Tor resists this attack by +having an additional type of OR -- the ``bridge node'' which is +distinguished from other ORs by not having its IP address +included in the directory. Operators of bridge nodes publish +their IP address to a single bridge authority which distributes +IP addresses to users in a way to resist an attacker being able +to enumerate (and thus block) them all. Currently bridge IP +addresses are made available on a website (where requests from +the same source IP address always get the same answer) and via +email (where requests from the same email address always get the +same answer). Bridge IP addresses are also distributed by +personal contacts. + +Bridges resist blocking access to the Tor network by IP address, +but do not prevent an attacker blocking by protocol fingerprint. +Tor's use of TLS is designed to provide some resistance against +this attack, through impersonating HTTPS, but due to efficiency +and simplicity considerations, it does not give perfect +protection. Steganographic transports (e.g. embedding data in +images) would improve resistance to fingerprinting but at a high +cost to effeciency so would not be appropriate for all users. +Also, users in some countries may need to disguise their traffic +as different protocols due to particular policies in place. +Therefore the protocol-fingerprinting-resistance part of Tor has +been left the responsibility of an external ``pluggable +transport'' program, which is responsible for obfuscating Tor's +TLS traffic at the OP end, and converting it back to TLS at the +bridge. Since the pluggable transport operates on TLS +ciphertext, which would otherwise be sent directly over the +network, it can't harm the security properties Tor provides, and +so Tor users can accept pluggable transports written by +third-parties, as long as they are confident the software is not +malicious. + \noindent{\large\bf Directory attacks}\\ % This whole section is mostly wrong now. -NM % Needs a discussion of epistemic attacks. -NM

1 0