June 2018 - tor-commits - lists.torproject.org

[torspec/master] Mark 290 as meta
by nickm＠torproject.org 03 Jun '18

03 Jun '18

commit 89edd9d86504fcb85f5a9f65fa51a0c6f1b85adc Author: Nick Mathewson <nickm(a)torproject.org> Date: Sun Jun 3 11:22:43 2018 -0700 Mark 290 as meta --- proposals/290-deprecate-consensus-methods.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/proposals/290-deprecate-consensus-methods.txt b/proposals/290-deprecate-consensus-methods.txt index 54e900c..979559c 100644 --- a/proposals/290-deprecate-consensus-methods.txt +++ b/proposals/290-deprecate-consensus-methods.txt @@ -2,7 +2,7 @@ Filename: 290-deprecate-consensus-methods.txt Title: Continuously update consensus methods Author: Nick Mathewson Created: 2018-02-21 -Status: Open +Status: Meta 1. Background

1 0

[torspec/master] Add 242 as reserve. It is an okay idea but it is not going on the roadmap soon
by nickm＠torproject.org 03 Jun '18

03 Jun '18

commit 76b32e7a9fb67fa0004e25b6bdff304680e43bcf Author: Nick Mathewson <nickm(a)torproject.org> Date: Sun Jun 3 11:21:10 2018 -0700 Add 242 as reserve. It is an okay idea but it is not going on the roadmap soon --- proposals/242-better-families.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/proposals/242-better-families.txt b/proposals/242-better-families.txt index f8d0894..8a79fa2 100644 --- a/proposals/242-better-families.txt +++ b/proposals/242-better-families.txt @@ -2,7 +2,7 @@ Filename: 242-better-families.txt Title: Better performance and usability for the MyFamily option Author: Nick Mathewson Created: 2015-02-27 -Status: Open +Status: Reserve 1. Problem statement.

1 0

[torspec/master] Regenerate index once more.
by nickm＠torproject.org 03 Jun '18

03 Jun '18

commit c083575cebc3a9940c9160759116ea9577a395e0 Author: Nick Mathewson <nickm(a)torproject.org> Date: Sun Jun 3 11:23:29 2018 -0700 Regenerate index once more. --- proposals/000-index.txt | 64 ++++++++++++++++++++++++------------------------- 1 file changed, 32 insertions(+), 32 deletions(-) diff --git a/proposals/000-index.txt b/proposals/000-index.txt index 7ac3b57..b1c7fa5 100644 --- a/proposals/000-index.txt +++ b/proposals/000-index.txt @@ -97,22 +97,22 @@ Proposals by number: 174 Optimistic Data for Tor: Server Side [CLOSED] 175 Automatically promoting Tor clients to nodes [REJECTED] 176 Proposed version-3 link handshake for Tor [CLOSED] -177 Abstaining from votes on individual flags [OPEN] +177 Abstaining from votes on individual flags [RESERVE] 178 Require majority of authorities to vote for consensus parameters [CLOSED] 179 TLS certificate and parameter normalization [CLOSED] 180 Pluggable transports for circumvention [CLOSED] 181 Optimistic Data for Tor: Client Side [CLOSED] -182 Credit Bucket [OPEN] +182 Credit Bucket [OBSOLETE] 183 Refill Intervals [CLOSED] 184 Miscellaneous changes for a v3 Tor link protocol [CLOSED] 185 Directory caches without DirPort [SUPERSEDED] 186 Multiple addresses for one OR or bridge [CLOSED] 187 Reserve a cell type to allow client authorization [CLOSED] 188 Bridge Guards and other anti-enumeration defenses [ACCEPTED] -189 AUTHORIZE and AUTHORIZED cells [OPEN] +189 AUTHORIZE and AUTHORIZED cells [OBSOLETE] 190 Bridge Client Authorization Based on a Shared Secret [OBSOLETE] -191 Bridge Detection Resistance against MITM-capable Adversaries [OPEN] -192 Automatically retrieve and store information about bridges [OPEN] +191 Bridge Detection Resistance against MITM-capable Adversaries [OBSOLETE] +192 Automatically retrieve and store information about bridges [OBSOLETE] 193 Safe cookie authentication for Tor controllers [CLOSED] 194 Mnemonic .onion URLs [SUPERSEDED] 195 TLS certificate normalization for Tor 0.2.4.x [DEAD] @@ -122,14 +122,14 @@ Proposals by number: 199 Integration of BridgeFinder and BridgeFinderHelper [OBSOLETE] 200 Adding new, extensible CREATE, EXTEND, and related cells [CLOSED] 201 Make bridges report statistics on daily v3 network status requests [OPEN] -202 Two improved relay encryption protocols for Tor cells [OPEN] +202 Two improved relay encryption protocols for Tor cells [META] 203 Avoiding censorship by impersonating an HTTPS server [OBSOLETE] 204 Subdomain support for Hidden Service addresses [CLOSED] 205 Remove global client-side DNS caching [CLOSED] 206 Preconfigured directory sources for bootstrapping [CLOSED] 207 Directory guards [CLOSED] 208 IPv6 Exits Redux [CLOSED] -209 Tuning the Parameters for the Path Bias Defense [OPEN] +209 Tuning the Parameters for the Path Bias Defense [OBSOLETE] 210 Faster Headless Consensus Bootstrapping [SUPERSEDED] 211 Internal Mapaddress for Tor Configuration Testing [RESERVE] 212 Increase Acceptable Consensus Age [OPEN] @@ -149,12 +149,12 @@ Proposals by number: 226 "Scalability and Stability Improvements to BridgeDB: Switching to a Distributed Database System and RDBMS" [OPEN] 227 Include package fingerprints in consensus documents [CLOSED] 228 Cross-certifying identity keys with onion keys [CLOSED] -229 Further SOCKS5 extensions [OPEN] +229 Further SOCKS5 extensions [REJECTED] 230 How to change RSA1024 relay identity keys [OBSOLETE] 231 Migrating authority RSA1024 identity keys [OBSOLETE] 232 Pluggable Transport through SOCKS proxy [FINISHED] -233 Making Tor2Web mode faster [OPEN] -234 Adding remittance field to directory specification [OPEN] +233 Making Tor2Web mode faster [REJECTED] +234 Adding remittance field to directory specification [REJECTED] 235 Stop assigning (and eventually supporting) the Named flag [CLOSED] 236 The move to a single guard node [CLOSED] 237 All relays are directory servers [CLOSED] @@ -162,7 +162,7 @@ Proposals by number: 239 Consensus Hash Chaining [DRAFT] 240 Early signing key revocation for directory authorities [DRAFT] 241 Resisting guard-turnover attacks [REJECTED] -242 Better performance and usability for the MyFamily option [OPEN] +242 Better performance and usability for the MyFamily option [RESERVE] 243 Give out HSDir flag only to relays with Stable flag [CLOSED] 244 Use RFC5705 Key Exporting in our AUTHENTICATE calls [CLOSED] 245 Deprecating and removing the TAP circuit extension protocol [DRAFT] @@ -176,12 +176,12 @@ Proposals by number: 253 Out of Band Circuit HMACs [DEAD] 254 Padding Negotiation [DRAFT] 255 Controller features to allow for load-balancing hidden services [DRAFT] -256 Key revocation for relays and authorities [OPEN] +256 Key revocation for relays and authorities [RESERVE] 257 Refactoring authorities and making them more isolated from the net [META] 258 Denial-of-service resistance for directory authorities [ACCEPTED] 259 New Guard Selection Behaviour [OBSOLETE] 260 Rendezvous Single Onion Services [FINISHED] -261 AEZ for relay cryptography [OPEN] +261 AEZ for relay cryptography [OBSOLETE] 262 Re-keying live circuits with new cryptographic material [OPEN] 263 Request to change key exchange protocol for handshake v1.2 [OBSOLETE] 264 Putting version numbers on the Tor subprotocols [CLOSED] @@ -206,13 +206,13 @@ Proposals by number: 283 Move IPv6 ORPorts from microdescriptors to the microdesc consensus [ACCEPTED] 284 Hidden Service v3 Control Port [CLOSED] 285 Directory documents should be standardized as UTF-8 [OPEN] -286 Controller APIs for hibernation access on mobile [OPEN] +286 Controller APIs for hibernation access on mobile [REJECTED] 287 Reduce circuit lifetime without overloading the network [OPEN] 288 Privacy-Preserving Statistics with Privcount in Tor (Shamir version) [ACCEPTED] 289 Authenticating sendme cells to mitigate bandwidth attacks [OPEN] -290 Continuously update consensus methods [OPEN] +290 Continuously update consensus methods [META] 291 The move to two guard nodes [OPEN] -292 Mesh-based vanguards [OPEN] +292 Mesh-based vanguards [ACCEPTED] 293 Other ways for relays to know when to publish [OPEN] 294 TLS 1.3 Migration [DRAFT] @@ -234,35 +234,19 @@ Proposals by status: 281 Downloading microdescriptors in bulk 294 TLS 1.3 Migration OPEN: - 177 Abstaining from votes on individual flags [for 0.2.4.x] - 182 Credit Bucket - 189 AUTHORIZE and AUTHORIZED cells - 191 Bridge Detection Resistance against MITM-capable Adversaries - 192 Automatically retrieve and store information about bridges [for 0.2.[45].x] 201 Make bridges report statistics on daily v3 network status requests [for 0.2.4.x] - 202 Two improved relay encryption protocols for Tor cells - 209 Tuning the Parameters for the Path Bias Defense [for 0.2.4.x+] 212 Increase Acceptable Consensus Age [for 0.2.4.x+] 219 Support for full DNS and DNSSEC resolution in Tor [for 0.2.5.x] 226 "Scalability and Stability Improvements to BridgeDB: Switching to a Distributed Database System and RDBMS" - 229 Further SOCKS5 extensions - 233 Making Tor2Web mode faster - 234 Adding remittance field to directory specification - 242 Better performance and usability for the MyFamily option - 256 Key revocation for relays and authorities - 261 AEZ for relay cryptography 262 Re-keying live circuits with new cryptographic material 275 Stop including meaningful "published" time in microdescriptor consensus [for 0.3.1.x-alpha] 276 Report bandwidth with lower granularity in consensus documents [for 0.3.1.x-alpha] 277 Detect multiple relay instances running with same ID [for 0.3.??] 282 Remove "Named" and "Unnamed" handling from consensus voting [for 0.3.3.x] 285 Directory documents should be standardized as UTF-8 - 286 Controller APIs for hibernation access on mobile 287 Reduce circuit lifetime without overloading the network 289 Authenticating sendme cells to mitigate bandwidth attacks - 290 Continuously update consensus methods 291 The move to two guard nodes - 292 Mesh-based vanguards 293 Other ways for relays to know when to publish [for 0.3.5] ACCEPTED: 172 GETINFO controller option for circuit information @@ -273,12 +257,15 @@ Proposals by status: 265 Load Balancing with Overhead Parameters [for 0.2.9.x] 283 Move IPv6 ORPorts from microdescriptors to the microdesc consensus [for 0.3.3.x] [in 0.3.3.1-alpha] 288 Privacy-Preserving Statistics with Privcount in Tor (Shamir version) + 292 Mesh-based vanguards META: 000 Index of Tor Proposals 001 The Tor Proposal Process 098 Proposals that should be written 099 Miscellaneous proposals + 202 Two improved relay encryption protocols for Tor cells 257 Refactoring authorities and making them more isolated from the net + 290 Continuously update consensus methods FINISHED: 160 Authorities vote for bandwidth offsets in consensus [for 0.2.1.x] 196 Extended ORPort and TransportControlPort [in 0.2.5.2-alpha] @@ -407,8 +394,12 @@ Proposals by status: 168 Reduce default circuit window 175 Automatically promoting Tor clients to nodes 197 Message-based Inter-Controller IPC Channel + 229 Further SOCKS5 extensions + 233 Making Tor2Web mode faster + 234 Adding remittance field to directory specification 241 Resisting guard-turnover attacks 246 Merging Hidden Service Directories and Introduction Points + 286 Controller APIs for hibernation access on mobile OBSOLETE: 127 Relaying dirport requests to Tor download site / website 131 Help users to verify they are using Tor @@ -416,17 +407,26 @@ Proposals by status: 141 Download server descriptors on demand 144 Increase the diversity of circuits by detecting nodes belonging the same provider 164 Reporting the status of server votes + 182 Credit Bucket + 189 AUTHORIZE and AUTHORIZED cells 190 Bridge Client Authorization Based on a Shared Secret + 191 Bridge Detection Resistance against MITM-capable Adversaries + 192 Automatically retrieve and store information about bridges [for 0.2.[45].x] 199 Integration of BridgeFinder and BridgeFinderHelper 203 Avoiding censorship by impersonating an HTTPS server + 209 Tuning the Parameters for the Path Bias Defense [for 0.2.4.x+] 230 How to change RSA1024 relay identity keys [for 0.2.?] 231 Migrating authority RSA1024 identity keys [for 0.2.?] 259 New Guard Selection Behaviour + 261 AEZ for relay cryptography 263 Request to change key exchange protocol for handshake v1.2 268 New Guard Selection Behaviour RESERVE: 133 Incorporate Unreachable ORs into the Tor Network + 177 Abstaining from votes on individual flags [for 0.2.4.x] 211 Internal Mapaddress for Tor Configuration Testing [for 0.2.4.x+] 223 Ace: Improved circuit-creation key exchange + 242 Better performance and usability for the MyFamily option + 256 Key revocation for relays and authorities INFORMATIONAL: 159 Exit Scanning

1 0

[torspec/master] Mark 195 as dead: The unimplemented parts will not happen.
by nickm＠torproject.org 03 Jun '18

03 Jun '18

commit 3b296bd34231b543e2f992f3117e2d4962aac60c Author: Nick Mathewson <nickm(a)torproject.org> Date: Sun Jun 3 11:04:50 2018 -0700 Mark 195 as dead: The unimplemented parts will not happen. --- proposals/195-TLS-normalization-for-024.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/proposals/195-TLS-normalization-for-024.txt b/proposals/195-TLS-normalization-for-024.txt index 37ee546..bfc8d9a 100644 --- a/proposals/195-TLS-normalization-for-024.txt +++ b/proposals/195-TLS-normalization-for-024.txt @@ -2,7 +2,7 @@ Filename: 195-TLS-normalization-for-024.txt Title: TLS certificate normalization for Tor 0.2.4.x Author: Jacob Appelbaum, Gladys Shufflebottom, Nick Mathewson, Tim Wilde Created: 6-Mar-2012 -Status: Draft +Status: Dead Target: 0.2.4.x

1 0

[torspec/master] Mark 190 as obsoleted by PTs
by nickm＠torproject.org 03 Jun '18

03 Jun '18

commit 3fc694dacf03881bc20df21407a6d0164b94f3e6 Author: Nick Mathewson <nickm(a)torproject.org> Date: Sun Jun 3 11:10:16 2018 -0700 Mark 190 as obsoleted by PTs --- proposals/190-shared-secret-bridge-authorization.txt | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/proposals/190-shared-secret-bridge-authorization.txt b/proposals/190-shared-secret-bridge-authorization.txt index e3c2f79..31c692b 100644 --- a/proposals/190-shared-secret-bridge-authorization.txt +++ b/proposals/190-shared-secret-bridge-authorization.txt @@ -2,7 +2,9 @@ Filename: 190-shared-secret-bridge-authorization.txt Title: Bridge Client Authorization Based on a Shared Secret Author: George Kadianakis Created: 04 Nov 2011 -Status: Needs-Revision +Status: Obsolete + +Notes: This is obsoleted by pluggable transports. 1. Overview

1 0

[torspec/master] Mark 168 as Rejected
by nickm＠torproject.org 03 Jun '18

03 Jun '18

commit 13621de747cbd5d173ee5772e1819d4eb97d8833 Author: Nick Mathewson <nickm(a)torproject.org> Date: Sun Jun 3 11:09:12 2018 -0700 Mark 168 as Rejected Roger says that they ran experiments and found that it didn't work as well as they hoped. --- proposals/168-reduce-circwindow.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/proposals/168-reduce-circwindow.txt b/proposals/168-reduce-circwindow.txt index aed1d61..9932ff6 100644 --- a/proposals/168-reduce-circwindow.txt +++ b/proposals/168-reduce-circwindow.txt @@ -2,7 +2,7 @@ Filename: 168-reduce-circwindow.txt Title: Reduce default circuit window Author: Roger Dingledine Created: 12-Aug-2009 -Status: Open +Status: Rejected 0. History

1 0

[torspec/master] Proposal 203 is obsoleted by pluggable transports.
by nickm＠torproject.org 03 Jun '18

03 Jun '18

commit 6e64dbcbddb2087a58d63e8c40cfbc85a459a29a Author: Nick Mathewson <nickm(a)torproject.org> Date: Sun Jun 3 11:05:44 2018 -0700 Proposal 203 is obsoleted by pluggable transports. --- proposals/203-https-frontend.txt | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/proposals/203-https-frontend.txt b/proposals/203-https-frontend.txt index df30cd5..4bbb271 100644 --- a/proposals/203-https-frontend.txt +++ b/proposals/203-https-frontend.txt @@ -2,7 +2,9 @@ Filename: 203-https-frontend.txt Title: Avoiding censorship by impersonating an HTTPS server Author: Nick Mathewson Created: 24 Jun 2012 -Status: Draft +Status: Obsolete + +Note: Obsoleted-by pluggable transports. Overview:

1 0

[torspec/master] Mark prop288 as accepted
by nickm＠torproject.org 03 Jun '18

03 Jun '18

commit 176d7fbb4be965746c84b832bba7c313a2576503 Author: Nick Mathewson <nickm(a)torproject.org> Date: Sun Jun 3 11:08:53 2018 -0700 Mark prop288 as accepted --- proposals/288-privcount-with-shamir.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/proposals/288-privcount-with-shamir.txt b/proposals/288-privcount-with-shamir.txt index 4489048..76a065d 100644 --- a/proposals/288-privcount-with-shamir.txt +++ b/proposals/288-privcount-with-shamir.txt @@ -3,7 +3,7 @@ Title: Privacy-Preserving Statistics with Privcount in Tor (Shamir version) Author: Nick Mathewson, Tim Wilson-Brown, Aaron Johnson Created: 1-Dec-2017 Supercedes: 280 -Status: Draft +Status: Accepted 0. Acknowledgments

1 0

[torspec/master] Mark 253 as dead per author's comments.
by nickm＠torproject.org 03 Jun '18

03 Jun '18

commit 433cfc01e694eaf86b5baa3e3fe8a4962e28b222 Author: Nick Mathewson <nickm(a)torproject.org> Date: Sun Jun 3 11:08:01 2018 -0700 Mark 253 as dead per author's comments. --- proposals/253-oob-hmac.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/proposals/253-oob-hmac.txt b/proposals/253-oob-hmac.txt index 7171e91..9e9e1d7 100644 --- a/proposals/253-oob-hmac.txt +++ b/proposals/253-oob-hmac.txt @@ -2,7 +2,7 @@ Filename: 253-oob-hmac.txt Title: Out of Band Circuit HMACs Authors: Mike Perry Created: 01 September 2015 -Status: Draft +Status: Dead 0. Motivation

1 0

[torspec/master] Mark prop230 and prop231 as obsolted by Ed keys and superseded.
by nickm＠torproject.org 03 Jun '18

03 Jun '18

commit 6fd4a50cb1b7a8a4f371e128c43a4de8ed2683a4 Author: Nick Mathewson <nickm(a)torproject.org> Date: Sun Jun 3 11:07:01 2018 -0700 Mark prop230 and prop231 as obsolted by Ed keys and superseded. --- proposals/230-rsa1024-relay-id-migration.txt | 4 +++- proposals/231-migrate-authority-rsa1024-ids.txt | 4 +++- 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/proposals/230-rsa1024-relay-id-migration.txt b/proposals/230-rsa1024-relay-id-migration.txt index efdbdff..3a997fe 100644 --- a/proposals/230-rsa1024-relay-id-migration.txt +++ b/proposals/230-rsa1024-relay-id-migration.txt @@ -3,7 +3,9 @@ Title: How to change RSA1024 relay identity keys Authors: Nick Mathewson Created: 7 April 2014 Target: 0.2.? -Status: Draft +Status: Obsolete + +Note: Obsoleted by Ed25519 ID keys; superseded by 240 and 256. 1. Intro and motivation diff --git a/proposals/231-migrate-authority-rsa1024-ids.txt b/proposals/231-migrate-authority-rsa1024-ids.txt index 88c78e1..a3887f2 100644 --- a/proposals/231-migrate-authority-rsa1024-ids.txt +++ b/proposals/231-migrate-authority-rsa1024-ids.txt @@ -3,7 +3,9 @@ Title: Migrating authority RSA1024 identity keys Authors: Nick Mathewson Created: 8 April 2014 Target: 0.2.? -Status: Draft +Status: Obsolete: + +Note: Obsoleted by Ed25519 ID keys; superseded by 240 and 256. 1. Intro and motivation

1 0