January 2016 - tor-commits - lists.torproject.org

[translation/https_everywhere] Update translations for https_everywhere
by translation＠torproject.org 15 Jan '16

15 Jan '16

commit e3dd391e918d0678f2e807f634a14eb9df05cdad Author: Translation commit bot <translation(a)torproject.org> Date: Fri Jan 15 15:45:17 2016 +0000 Update translations for https_everywhere --- mr/ssl-observatory.dtd | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/mr/ssl-observatory.dtd b/mr/ssl-observatory.dtd index d6bc0f1..e3bc42c 100644 --- a/mr/ssl-observatory.dtd +++ b/mr/ssl-observatory.dtd @@ -1,7 +1,7 @@  <!ENTITY ssl-observatory.popup.details "Details and Privacy Information"> <!ENTITY ssl-observatory.popup.later "Ask Me Later"> -<!ENTITY ssl-observatory.popup.no "No"> +<!ENTITY ssl-observatory.popup.no "नाही"> <!ENTITY ssl-observatory.popup.text "HTTPS Everywhere can detect attacks against your browser by sending the certificates you receive to the

1 0

[translation/bridgedb] Update translations for bridgedb
by translation＠torproject.org 15 Jan '16

15 Jan '16

commit bb755f3dd0ac7d17fafbc31510dbbfe37729314d Author: Translation commit bot <translation(a)torproject.org> Date: Fri Jan 15 15:45:03 2016 +0000 Update translations for bridgedb --- mr/LC_MESSAGES/bridgedb.po | 34 +++++++++++++++++----------------- 1 file changed, 17 insertions(+), 17 deletions(-) diff --git a/mr/LC_MESSAGES/bridgedb.po b/mr/LC_MESSAGES/bridgedb.po index 3c53158..9494be5 100644 --- a/mr/LC_MESSAGES/bridgedb.po +++ b/mr/LC_MESSAGES/bridgedb.po @@ -9,7 +9,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: 'https://trac.torproject.org/projects/tor/newticket?component=BridgeDB&keywo…'\n" "POT-Creation-Date: 2015-07-25 03:40+0000\n" -"PO-Revision-Date: 2016-01-15 08:24+0000\n" +"PO-Revision-Date: 2016-01-15 15:44+0000\n" "Last-Translator: Vikrant Korde <vikrant.korde(a)gmail.com>\n" "Language-Team: Marathi (http://www.transifex.com/otf/torproject/language/mr/)\n" "MIME-Version: 1.0\n" @@ -32,7 +32,7 @@ msgstr "" #. "Tor Browser" #: bridgedb/https/server.py:167 msgid "Sorry! Something went wrong with your request." -msgstr "" +msgstr "क्षमस्व! काहीतरी चूक झाली आहे" #: bridgedb/https/templates/base.html:79 msgid "Report a Bug" @@ -79,18 +79,18 @@ msgstr "मिळवताना गडबड झाली" msgid "" "This QRCode contains your bridge lines. Scan it with a QRCode reader to copy" " your bridge lines onto mobile and other devices." -msgstr "" +msgstr "ह्या QR कोड मध्ये आपल्या ब्रिज ओळी आहेत. आपल्या ब्रिज ओळी मोबाइल आणि इतर साधनांवर वर कॉपी करण्यासाठी QR कोड वाचकाने स्कॅन करा." #: bridgedb/https/templates/bridges.html:131 msgid "There currently aren't any bridges available..." -msgstr "" +msgstr "सध्या कोणतेही ब्रिजेस उपलब्ध नाहीत ... " #: bridgedb/https/templates/bridges.html:132 #, python-format msgid "" " Perhaps you should try %s going back %s and choosing a different bridge " "type!" -msgstr "" +msgstr "तुम्ही %s मागे %s जाउन दुसरा ब्रिज प्रकार निवडावा" #: bridgedb/https/templates/index.html:11 #, python-format @@ -100,7 +100,7 @@ msgstr "पायरी %s1%s" #: bridgedb/https/templates/index.html:13 #, python-format msgid "Download %s Tor Browser %s" -msgstr "" +msgstr "डाउनलोड %s टोर ब्राउझर %s" #: bridgedb/https/templates/index.html:25 #, python-format @@ -120,7 +120,7 @@ msgstr "पायरी %s3%s" #: bridgedb/https/templates/index.html:38 #, python-format msgid "Now %s add the bridges to Tor Browser %s" -msgstr "" +msgstr "आता %s ब्रिजेस टोर ब्राउझर मध्ये टाका %s" #. TRANSLATORS: Please make sure the '%s' surrounding single letters at the #. beginning of words are present in your final translation. Thanks! @@ -129,19 +129,19 @@ msgstr "" #: bridgedb/https/templates/options.html:38 #, python-format msgid "%sJ%sust give me bridges!" -msgstr "" +msgstr "%sम%sला ब्रिजेस द्या!" #: bridgedb/https/templates/options.html:51 msgid "Advanced Options" -msgstr "" +msgstr "प्रगत पर्याय" #: bridgedb/https/templates/options.html:86 msgid "No" -msgstr "" +msgstr "नाही" #: bridgedb/https/templates/options.html:87 msgid "none" -msgstr "" +msgstr "काहीही नाही" #. TRANSLATORS: Please make sure the '%s' surrounding single letters at the #. beginning of words are present in your final translation. Thanks! @@ -149,7 +149,7 @@ msgstr "" #: bridgedb/https/templates/options.html:124 #, python-format msgid "%sY%ses!" -msgstr "" +msgstr "%sहो%sय!" #. TRANSLATORS: Please make sure the '%s' surrounding single letters at the #. beginning of words are present in your final translation. Thanks! @@ -157,15 +157,15 @@ msgstr "" #: bridgedb/https/templates/options.html:147 #, python-format msgid "%sG%set Bridges" -msgstr "" +msgstr "%s पूल %s मिळवा" #: bridgedb/strings.py:43 msgid "[This is an automated message; please do not reply.]" -msgstr "" +msgstr "[हा एक स्वयंचलित संदेश आहे; कृपया प्रत्युत्तर देऊ नका ]" #: bridgedb/strings.py:45 msgid "Here are your bridges:" -msgstr "" +msgstr "येथे आपला पूल आहे:" #: bridgedb/strings.py:47 #, python-format @@ -182,7 +182,7 @@ msgstr "" #. TRANSLATORS: Please DO NOT translate the word "BridgeDB". #: bridgedb/strings.py:53 msgid "Welcome to BridgeDB!" -msgstr "" +msgstr "ब्रिज DB मध्ये आपले स्वागत आहे!" #. TRANSLATORS: Please DO NOT translate the words "transport" or "TYPE". #: bridgedb/strings.py:55 @@ -200,7 +200,7 @@ msgstr "हॅलो, मित्रा !" #: bridgedb/strings.py:58 bridgedb/https/templates/base.html:90 msgid "Public Keys" -msgstr "" +msgstr "पब्लिक किज्" #. TRANSLATORS: This string will end up saying something like: #. "This email was generated with rainbows, unicorns, and sparkles

1 0

[tor/master] Update the limits in max_dl_per_request for IPv6 address length
by nickm＠torproject.org 15 Jan '16

15 Jan '16

commit 91077d3aca2ea027816f4ea733bb8193dd60a2f2 Author: Fergus Dall <fergus(a)beware.dropbear.id.au> Date: Wed Jan 13 06:49:56 2016 +1030 Update the limits in max_dl_per_request for IPv6 address length --- changes/17573 | 3 +++ src/or/routerlist.c | 13 ++++++++++--- 2 files changed, 13 insertions(+), 3 deletions(-) diff --git a/changes/17573 b/changes/17573 new file mode 100644 index 0000000..fe1fd1c --- /dev/null +++ b/changes/17573 @@ -0,0 +1,3 @@ + o Minor bigfixes (IPv6): + - Update the limits in max_dl_per_request for IPv6 address + length. Closes ticket 17573. diff --git a/src/or/routerlist.c b/src/or/routerlist.c index 853c07d..8edab2c 100644 --- a/src/or/routerlist.c +++ b/src/or/routerlist.c @@ -4440,13 +4440,20 @@ static int max_dl_per_request(const or_options_t *options, int purpose) { /* Since squid does not like URLs >= 4096 bytes we limit it to 96. - * 4096 - strlen(http://255.255.255.255/tor/server/d/.z) == 4058 - * 4058/41 (40 for the hash and 1 for the + that separates them) => 98 + * 4096 - strlen(http://ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff + * /tor/server/d/.z) == 4034 + * 4034/41 (40 for the hash and 1 for the + that separates them) => 98 * So use 96 because it's a nice number. + * + * For microdescriptors, the calculation is + * 4096 - strlen(http://ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff + * /tor/micro/d/.z) == 4035 + * 4035/44 (43 for the hash and 1 for the - that separates them) => 91 + * So use 90 because it's a nice number. */ int max = 96; if (purpose == DIR_PURPOSE_FETCH_MICRODESC) { - max = 92; + max = 90; } /* If we're going to tunnel our connections, we can ask for a lot more * in a request. */

1 0

[tor/master] Include square brackets and port number in calcs for max_dl_per_request
by nickm＠torproject.org 15 Jan '16

15 Jan '16

commit d748c193e16bc13b6d00de168e5fff0a372620bc Author: Fergus Dall <fergus(a)beware.dropbear.id.au> Date: Wed Jan 13 18:05:35 2016 +1030 Include square brackets and port number in calcs for max_dl_per_request --- src/or/routerlist.c | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/src/or/routerlist.c b/src/or/routerlist.c index 8edab2c..139a292 100644 --- a/src/or/routerlist.c +++ b/src/or/routerlist.c @@ -4440,15 +4440,15 @@ static int max_dl_per_request(const or_options_t *options, int purpose) { /* Since squid does not like URLs >= 4096 bytes we limit it to 96. - * 4096 - strlen(http://ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff - * /tor/server/d/.z) == 4034 - * 4034/41 (40 for the hash and 1 for the + that separates them) => 98 + * 4096 - strlen(http://[ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff]:65535 + * /tor/server/d/.z) == 4026 + * 4026/41 (40 for the hash and 1 for the + that separates them) => 98 * So use 96 because it's a nice number. * * For microdescriptors, the calculation is - * 4096 - strlen(http://ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff - * /tor/micro/d/.z) == 4035 - * 4035/44 (43 for the hash and 1 for the - that separates them) => 91 + * 4096 - strlen(http://[ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff]:65535 + * /tor/micro/d/.z) == 4027 + * 4027/44 (43 for the hash and 1 for the - that separates them) => 91 * So use 90 because it's a nice number. */ int max = 96;

1 0

[translation/bridgedb] Update translations for bridgedb
by translation＠torproject.org 15 Jan '16

15 Jan '16

commit 1d099afe572b8b94c449a4e535bc1e35dc336db7 Author: Translation commit bot <translation(a)torproject.org> Date: Fri Jan 15 08:45:04 2016 +0000 Update translations for bridgedb --- mr/LC_MESSAGES/bridgedb.po | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/mr/LC_MESSAGES/bridgedb.po b/mr/LC_MESSAGES/bridgedb.po index 13a8011..3c53158 100644 --- a/mr/LC_MESSAGES/bridgedb.po +++ b/mr/LC_MESSAGES/bridgedb.po @@ -9,7 +9,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: 'https://trac.torproject.org/projects/tor/newticket?component=BridgeDB&keywo…'\n" "POT-Creation-Date: 2015-07-25 03:40+0000\n" -"PO-Revision-Date: 2016-01-15 05:25+0000\n" +"PO-Revision-Date: 2016-01-15 08:24+0000\n" "Last-Translator: Vikrant Korde <vikrant.korde(a)gmail.com>\n" "Language-Team: Marathi (http://www.transifex.com/otf/torproject/language/mr/)\n" "MIME-Version: 1.0\n" @@ -110,7 +110,7 @@ msgstr "पायरी %s2%s" #: bridgedb/https/templates/index.html:27 #, python-format msgid "Get %s bridges %s" -msgstr "" +msgstr "%s पूल %s मिळवा" #: bridgedb/https/templates/index.html:36 #, python-format @@ -196,7 +196,7 @@ msgstr "ओय, %s!" #: bridgedb/strings.py:57 msgid "Hello, friend!" -msgstr "" +msgstr "हॅलो, मित्रा !" #: bridgedb/strings.py:58 bridgedb/https/templates/base.html:90 msgid "Public Keys"

1 0

[translation/bridgedb] Update translations for bridgedb
by translation＠torproject.org 15 Jan '16

15 Jan '16

commit 9040dbd6c2cf067d5d47c529ae481cb575e15e30 Author: Translation commit bot <translation(a)torproject.org> Date: Fri Jan 15 05:45:03 2016 +0000 Update translations for bridgedb --- mr/LC_MESSAGES/bridgedb.po | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/mr/LC_MESSAGES/bridgedb.po b/mr/LC_MESSAGES/bridgedb.po index 77b8bca..13a8011 100644 --- a/mr/LC_MESSAGES/bridgedb.po +++ b/mr/LC_MESSAGES/bridgedb.po @@ -3,13 +3,13 @@ # This file is distributed under the same license as the BridgeDB project. # # Translators: -# Vikrant Korde <vikrant.korde(a)gmail.com>, 2015 +# Vikrant Korde <vikrant.korde(a)gmail.com>, 2015-2016 msgid "" msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: 'https://trac.torproject.org/projects/tor/newticket?component=BridgeDB&keywo…'\n" "POT-Creation-Date: 2015-07-25 03:40+0000\n" -"PO-Revision-Date: 2015-12-24 11:15+0000\n" +"PO-Revision-Date: 2016-01-15 05:25+0000\n" "Last-Translator: Vikrant Korde <vikrant.korde(a)gmail.com>\n" "Language-Team: Marathi (http://www.transifex.com/otf/torproject/language/mr/)\n" "MIME-Version: 1.0\n" @@ -95,7 +95,7 @@ msgstr "" #: bridgedb/https/templates/index.html:11 #, python-format msgid "Step %s1%s" -msgstr "" +msgstr "पायरी %s1%s" #: bridgedb/https/templates/index.html:13 #, python-format @@ -105,7 +105,7 @@ msgstr "" #: bridgedb/https/templates/index.html:25 #, python-format msgid "Step %s2%s" -msgstr "" +msgstr "पायरी %s2%s" #: bridgedb/https/templates/index.html:27 #, python-format @@ -115,7 +115,7 @@ msgstr "" #: bridgedb/https/templates/index.html:36 #, python-format msgid "Step %s3%s" -msgstr "" +msgstr "पायरी %s3%s" #: bridgedb/https/templates/index.html:38 #, python-format @@ -192,7 +192,7 @@ msgstr "" #: bridgedb/strings.py:56 #, python-format msgid "Hey, %s!" -msgstr "" +msgstr "ओय, %s!" #: bridgedb/strings.py:57 msgid "Hello, friend!"

1 0

[translation/tor-messenger-privproperties_completed] Update translations for tor-messenger-privproperties_completed
by translation＠torproject.org 14 Jan '16

14 Jan '16

commit dbcfc0135cbae58d36844c88bdd801d7714a0cd2 Author: Translation commit bot <translation(a)torproject.org> Date: Thu Jan 14 19:16:41 2016 +0000 Update translations for tor-messenger-privproperties_completed --- ca/priv.properties | 1 + 1 file changed, 1 insertion(+) diff --git a/ca/priv.properties b/ca/priv.properties new file mode 100644 index 0000000..53ac506 --- /dev/null +++ b/ca/priv.properties @@ -0,0 +1 @@ +priv.account=S'està generant una clau privada per a %S (%S)...

1 0

[tor-commits] [translation/tor-messenger-facebookproperties_completed] Update translations for tor-messenger-facebookproperties_completed
by translation＠torproject.org 14 Jan '16

14 Jan '16

commit 142743df064a40537f0115fc2011410762b0d4cc Author: Translation commit bot <translation(a)torproject.org> Date: Thu Jan 14 19:16:24 2016 +0000 Update translations for tor-messenger-facebookproperties_completed --- ca/facebook.properties | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/ca/facebook.properties b/ca/facebook.properties new file mode 100644 index 0000000..3dc2124 --- /dev/null +++ b/ca/facebook.properties @@ -0,0 +1,7 @@ +# This Source Code Form is subject to the terms of the Mozilla Public +# License, v. 2.0. If a copy of the MPL was not distributed with this +# file, You can obtain one at http://mozilla.org/MPL/2.0/. + +connection.error.useUsernameNotEmailAddress=Feu servir el vostre nom d'usuari del Facebook, no el correu electrònic + +facebook.chat.name=Xat de Facebook

1 0

[translation/tor-messenger-facebookproperties] Update translations for tor-messenger-facebookproperties
by translation＠torproject.org 14 Jan '16

14 Jan '16

commit b1e665bc60f1b8110a23c1144119add4841a52cb Author: Translation commit bot <translation(a)torproject.org> Date: Thu Jan 14 19:16:17 2016 +0000 Update translations for tor-messenger-facebookproperties --- ca/facebook.properties | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/ca/facebook.properties b/ca/facebook.properties index aaf7cdc..3dc2124 100644 --- a/ca/facebook.properties +++ b/ca/facebook.properties @@ -2,6 +2,6 @@ # License, v. 2.0. If a copy of the MPL was not distributed with this # file, You can obtain one at http://mozilla.org/MPL/2.0/. -connection.error.useUsernameNotEmailAddress=Please use your Facebook username, not an email address +connection.error.useUsernameNotEmailAddress=Feu servir el vostre nom d'usuari del Facebook, no el correu electrònic -facebook.chat.name=Facebook Chat +facebook.chat.name=Xat de Facebook

1 0

[torspec/master] Add my removing-obsolete-clients proposal as 266
by nickm＠torproject.org 14 Jan '16

14 Jan '16

commit 99acfe0bb19f0a0bcb7c1ec4866c817d91ade7c8 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Jan 14 11:24:16 2016 -0500 Add my removing-obsolete-clients proposal as 266 --- proposals/000-index.txt | 2 + .../266-removing-current-obsolete-clients.txt | 204 ++++++++++++++++++++ 2 files changed, 206 insertions(+) diff --git a/proposals/000-index.txt b/proposals/000-index.txt index 718dd31..411093b 100644 --- a/proposals/000-index.txt +++ b/proposals/000-index.txt @@ -186,6 +186,7 @@ Proposals by number: 263 Request to change key exchange protocol for handshake v1.1 [OPEN] 264 Putting version numbers on the Tor subprotocols [OPEN] 265 Load Balancing with Overhead Parameters [DRAFT] +266 Removing current obsolete clients from the Tor network [DRAFT] Proposals by status: @@ -213,6 +214,7 @@ Proposals by status: 259 New Guard Selection Behaviour 260 Rendezvous Single Onion Services 265 Load Balancing with Overhead Parameters + 266 Removing current obsolete clients from the Tor network NEEDS-REVISION: 190 Bridge Client Authorization Based on a Shared Secret OPEN: diff --git a/proposals/266-removing-current-obsolete-clients.txt b/proposals/266-removing-current-obsolete-clients.txt new file mode 100644 index 0000000..3d8a6c3 --- /dev/null +++ b/proposals/266-removing-current-obsolete-clients.txt @@ -0,0 +1,204 @@ +Filename: 266-removing-current-obsolete-clients.txt +Title: Removing current obsolete clients from the Tor network +Author: Nick Mathewson +Created: 14 Jan 2016 +Status: Draft + + +1. Introduction + + Frequently, we find that very old versions of Tor should no longer be + supported on the network. To remove relays is easy enough: we + simply update the directory authorities to stop listing relays that + advertise versions that are too old. + + But to disable clients is harder. + + In another proposal I describe a system for letting future clients go + gracefully obsolete. This proposal explains how we can safely + disable the obsolete clients we have today (and all other client + versions of Tor to date, assuming that they will someday become + obsolete). + +1.1. Why disable clients? + + * Security. Anybody who hasn't updated their Tor client in 5 + years is probably vulnerable to who-knows-what attacks. They + aren't likely to get much anonymity either. + + * Withstand zombie installations. Some Tors out there were once + configured to start-on-boot systems that are now unmaintained. + (See 1.4 below.) They put needless load on the network, and help + nobody. + + * Be able to remove backward-compatibility code. Currently, Tor + supports some truly ancient protocols in order to avoid breaking + ancient versions or Tor. This code needs to be maintained and + tested. Some of it depends on undocumented or deprecated or + non-portable OpenSSL features, and makes it hard to produce a + conforming Tor server implementation. + + * Make it easier to write a conforming Tor relay. If a Tor relay + needs to support every Tor client back through the beginning of + time, that makes it harder to develop and test compatible + implementations. + +1.2. Is this dangerous? + + I don't think so. This proposal describes a way to make older + clients gracefully disconnect from the network only when a majority + of authorities agree that they should. A majority of authorities + already have the ability to inflict arbitrary degrees of sabotage on + the consensus document. + +1.3. History + + The earliest versions of Tor checked the recommended-versions field + in the directory to see whether they should keep running. If they + saw that their version wasn't recommended, they'd shut down. There + was an "IgnoreVersion" option that let you keep running anyway. + + Later, around 2004, the rule changed to "shut down if the version is + _obsolete_", where obsolete was defined as "not recommended, and + older than a version that is recommended." + + In 0.1.1.7-alpha, we made obsolete versions only produce a warning, + and removed IgnoreVersion. (See 3ac34ae3293ceb0f2b8c49.) + + We have still disabled old tor versions. With Tor 0.2.0.5-alpha, + we disabled Tor versions before 0.1.1.6-alpha by having the v1 + authorities begin publishing empty directories only. + + In version 0.2.5.2-alpha, we completely removed support for the v2 + directory protocol used before Tor 0.2.0; there are no longer any v2 + authorities on the network. + + Tor versions before 0.2.1 will currently not progress past fetching + an initial directory, because they believe in a number of directory + authority identity keys that no longer sign the directory. + + Tor versions before 0.2.4 are (lightly) throttled in multihop + circuit creation, because we prioritize ntor CREATE cells over + TAP ones when under load. + +1.4. The big problem: slow zombies and fast zombies + + It would be easy enough to 'disable' old clients by simply removing + server support for the obsolete protocols that they use. But there's + a problem with that approach: what will the clients do when they fail + to make connections, or to extend circuits, or whatever else they are + no longer able to do? + + * Ideally, I'd like such clients to stop functioning _quietly_. If + they stop contacting the network, that would be best. + + * Next best would be if these clients contacted the network only + occasionally and at different times. I'll call these clients + "slow zombies". + + * Worse would be if the clients contact the network frequently, + over and over. I'll call these clients "fast zombies". They + would be at their worst when they focus on authorities, or when + they act in synchrony to all strike at once. + + One goal of this proposal is to ensure that future clients to not + become zombies at all; and that ancient clients become slow zombies + at worst. + + +2. Some ideas that don't work. + +2.1. Dropping connections based on link protocols. + + Tor versions before before 0.2.3.6-alpha use a renegotiation-based + handshake instead of our current handshake. We could detect these + handshakes and close the connection at the relay side if the client + attempts to renegotiate. + + I've tested these changes on versions maint-0.2.0 through + maint-0.2.2. They result in zombies with the following behavior: + + The client contact each authority it knows about, attempting to + make a one-hop directory connection. It fails, detects a failure, + then reconnects more and more slowly ... but one hour later, it + resets its connection schedule and starts again. + + In the steady state this appears to result in about two connections + per client per authority per hour. That is probably too many. + + (Most authorities would be affected: of the authorities that existed + in 0.2.2, gabelmoo has moved and turtles has shut down. The + authorities Faravahar and longclaw are new. The authorities moria1, + tor26, dizum, dannenberg, urras, maatuska and maatuska would all get + hit here.) + + (We could simply remove the renegotiation-detection code entirely, + and reply to all connections with an immediate VERSIONS cell. The + behavior would probably be the same, though.) + + If we throttled connections rather than closing them, we'd only get + one connnection per authority per hour, but authorities would have to + keep open a potentially huge number of sockets. + +2.2. Blocking circuit creation under certain circumstances + + In tor 0.2.5.1-alpha, we began ignoring the UseNTorHandshake option, + and always preferring the ntor handshake where available. + + Unfortunately, we can't simply drop all TAP handshakes, since clients + and relays can still use them in the hidden service protocol. But + we could detect these versions by: + + Looking for use of a TAP handshake from an IP not associated + with with any known relay, or on a connection where the client + did not authenticate. (This could be from a bridge, but clients + don't build circuits that go to an IntroPoint or RendPoint + directly after a bridge.) + + This would still result in clients not having directories, however, + and retrying once an hours. + +3. Ideas that might work + +3.1. Move all authorities to new ports + + We could have each authority known to older clients start listening + for connections at a new port P. We'd forward the old port to the new + port. Once sufficiently many clients were using the new ports, we + could disable the forwarding. + + This would result in the old clients turning into zombies as above, + but they would only be scrabbling at nonexistent ports, causing less + load on the authorities. + + [This proposal would probably be easiest to implement.] + +3.2. Start disabling old link protocols on relays + + We could have new relays start dropping support for the old link + protocols, while maintaining support on the authorities and older + relays. + + The result here would be a degradation of older client performance + over time. They'd still behave zombieishly if the authorities + dropped support, however. + +3.3. Changing the consensus format. + + We could allow 'f' (short for "flag") as a synonym for 's' in + consensus documents. Later, if we want to disable all Tor versions + before today, we can change the consensus algorithm so that the + consensus (or perhaps only the microdesc consensus) is spelled with + 'f' lines instead of 'f' lines. This will create a consensus which + older clients and relays parse as having all nodes down, which will + make them not connect to the network at all. + + We could similarly replace "r" with "n", or replace Running with + Online, or so on. + + In doing this, we could also rename fresh-until and valid-until, so + that new clients would have the real expiration date, and old clients + would see "this consensus never expires". This would prevent them + from downloading new consensuses. + + [This proposal would result in the quietest shutdown.]

1 0