[tor-bugs] #3460 [Tor Hidden Services]: Replay-detection window for HS INTRODUCE2 cells causes HS reachability failures

[Tor Bug Tracker & Wiki]

#3460: Replay-detection window for HS INTRODUCE2 cells causes HS reachability
failures
---------------------------------+------------------------------------------
 Reporter:  rransom              |          Owner:  rransom           
     Type:  task                 |         Status:  needs_review      
 Priority:  normal               |      Milestone:  Tor: 0.2.3.x-final
Component:  Tor Hidden Services  |        Version:                    
 Keywords:                       |         Parent:                    
   Points:                       |   Actualpoints:                    
---------------------------------+------------------------------------------
Changes (by rransom):

  * milestone:  Tor: 0.2.2.x-final => Tor: 0.2.3.x-final


Comment:

 Replying to [comment:6 nickm]:
 > Okay, I think I understand it now, and I'd like to merge it.  A few
 final requests:
 >
 > * Could we rename one of the "accepted_intros" fields to something else,
 and document: that the per-service one works differently from the per-
 intropoint one; that one is for security and the other is to avoid
 redundant rendezvous; and that one lasts for the lifetime of the intro
 point while the other gets cleaned?  It seems error-prone to have two maps
 with similar names and documentation but with crucially different
 semantics.

 Done and pushed to my bug3460-v4 branch, along with documentation-comment
 fixes.

 > * Can I have a patch to rend-spec.txt to document this new behavior?

 Real Soon Now.  rend-spec.txt doesn't say what the timestamp field in an
 INTRODUCE* cell is for, so this Tor change doesn't actually make anything
 in rend-spec.txt wrong or obsolete.  I also see some other things that
 need to be fixed (the description of HidServAuth is wrong).


 I'm changing the milestone to 0.2.3.x-final, because you're not going to
 merge this change to 0.2.2.x.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3460#comment:7>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online