-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
On 13/05/14 18:28, Michael Rogers wrote:
A fourth possibility is to rank the candidate nodes for each position in the circuit, and build the circuit through the highest-ranked candidate for each position that's currently online. Thus whenever the circuit's rebuilt it will pass through the same nodes if possible, or mostly the same nodes if some of the favourite candidates are offline. Over time the circuit will gradually move to new nodes due to churn - but that will happen as slowly for this design as it can happen for any design.
Sorry for the self-reply. I've realised this has the same problem as one of the other possibilities - a bad node can veto any attempt to extend the circuit to a good node, so any circuit that hits a bad node will pass through bad nodes from that point on.
It seems the only safe thing is to rebuild the circuit using all the same nodes, or if that isn't possible, build an entirely new circuit.
Cheers, Michael