[tor-bugs] #1751 [Tor Relay]: Project: Make it harder to use exits as one-hop proxies

[Tor Bug Tracker & Wiki]

#1751: Project: Make it harder to use exits as one-hop proxies
-----------------------+----------------------------------------------------
 Reporter:  nickm      |       Owner:                     
     Type:  task       |      Status:  needs_review       
 Priority:  normal     |   Milestone:  Deliverable-Sep2010
Component:  Tor Relay  |     Version:                     
 Keywords:             |      Parent:                     
-----------------------+----------------------------------------------------

Comment(by arma):

 I'm not sure what I think the default default should be. If there's no
 consensus or we forget to have enough active votes about that param, and
 we think the feature works, we want it to default to 1. But if we later
 decide there's a bug in how Tors do the blocking of exit requests, and we
 end up moving to a new behavior and a new consensus param name, then we
 would have to maintain the old consensus param just to declare "no don't
 do that if you're an old tor" for the next years.

 So I would argue that we should make sure to have enough active votes
 about the param, not worry about the transient edge case where the relay
 doesn't have any consensus yet, and be defensive against the possibility
 that our heuristic in connection_exit_begin_conn() is not the final
 heuristic we want to choose.

 On the other hand, it may well be the case that we improve the heuristic
 in future versions, but want to keep using the one we have now in present
 versions since it's good enough and better than nothing.

 I'm not sure how to read the future here. So I guess either of them is ok,
 and we'll learn a lesson either way. It really depends whether we think
 this particular heuristic could go downright wrong down the road, as
 opposed to "not as right as it could be".

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/1751#comment:25>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online