[tor-bugs] #3678 [Tor Client]: Disallow more than one relay per country in a circuit

[Tor Bug Tracker & Wiki]

#3678: Disallow more than one relay per country in a circuit
-------------------------+--------------------------------------------------
 Reporter:  cypherpunks  |          Owner:                   
     Type:  enhancement  |         Status:  needs_information
 Priority:  major        |      Milestone:                   
Component:  Tor Client   |        Version:                   
 Keywords:               |         Parent:                   
   Points:               |   Actualpoints:                   
-------------------------+--------------------------------------------------

Comment(by cypherpunks):

 Replying to [comment:17 cypherpunks]:
 > Mmm. It appears I have under-estimated the problem. It seems anything
 Tor does at a routing level, the user loses. I know Tor cannot defeat the
 global passive adversary, but it seems Tor cannot even protect against a
 local passive adversary.  The Steven Murdoch paper on IX sampling should
 scare everyone the most.
 >
 > I wonder if there is a solution to this problem at all.

 It is a hard and open research problem. I think it's likely that at least
 a partial solution exists. As Nick said, our latest work is somewhat
 relevant. Expanding from trust of individual parts of the network to
 expectations about the likelihood that they are cooperating is still in
 the early stages, however.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3678#comment:18>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online