commit 975110728a6e22fb1bc695c8b2480e225dd8bd1d Author: Roger Dingledine <arma@torproject.org> Date: Fri Apr 22 23:26:45 2016 -0400 clarify the confidentiality part after ian asked --- htdocs/safetyboard.html | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/htdocs/safetyboard.html b/htdocs/safetyboard.html index 12c8dec..deb5752 100644 --- a/htdocs/safetyboard.html +++ b/htdocs/safetyboard.html @@ -106,7 +106,9 @@ about the benefits and risks of your experiment. Hopefully our feedback on your thoughts will help too. At the same time, this process will help Tor by letting us know what research is happening — which in turn can help you, since we might be able to let you know about a concurrent -experiment that will mess up your results. +experiment (with their permission of course) that will mess up your +results. Also, we can let you know about upcoming Tor design changes +that might change your plans or analysis. <p> To best help you, we want to hear about four aspects of your proposed @@ -188,7 +190,8 @@ who want to cooperate, while showing to the world that it's possible to do good Tor research safely. <p><b>Can't I just run Tor relays and do my experiment without telling you?</b> -Please don't! The directory authorities have been much more conservative +Please don't! The directory authority operators have been much more +conservative lately (after the CMU incident in particular) in terms of looking for suspicious patterns or behavior, and removing suspicious relays from the network. If the directory authority operators know about you, understand @@ -213,7 +216,8 @@ between the researchers and the program committees. We aren't trying to replace IRBs or other projects like ethicalresearch.org. <p><b>What about confidentiality?</b> -We will keep assessments that we receive confidential in the same +Unless you tell us otherwise, we will keep assessments that we receive +confidential in the same way that program committees do. You're coming to us much earlier in the process (ideally before the research is performed and before the paper is written), which we recognize requires more trust. We hope we