commit f936c50a1f7defa87c24e4f34f6e1b1c375d7d10 Author: Nick Mathewson <nickm@torproject.org> Date: Thu Dec 8 10:26:54 2016 -0500 271: Note the stickiness (not persistence) of unconfirmed primary guards asn spotted this during code review. --- proposals/271-another-guard-selection.txt | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/proposals/271-another-guard-selection.txt b/proposals/271-another-guard-selection.txt index 4da79ed..0f9328f 100644 --- a/proposals/271-another-guard-selection.txt +++ b/proposals/271-another-guard-selection.txt @@ -355,6 +355,10 @@ Status: Open PRIMARY_GUARDS chosen _uniformly_ at random from ({FILTERED_GUARDS} - {CONFIRMED_GUARDS}). + Once an element has been added to {PRIMARY_GUARDS}, we do not remove it + until it is replaced by some element from {CONFIRMED_GUARDS}. Confirmed + elements always proceed unconfirmed ones in the {PRIMARY_GUARDS} list. + Note that {PRIMARY_GUARDS} do not have to be in {USABLE_FILTERED_GUARDS}: they might be unreachable.