[tor-bugs] #4130 [Tor Relay]: Should relays use begindir or naked dirport connections?

[Tor Bug Tracker & Wiki]

#4130: Should relays use begindir or naked dirport connections?
-------------------------+--------------------------------------------------
 Reporter:  arma         |          Owner:                    
     Type:  enhancement  |         Status:  new               
 Priority:  normal       |      Milestone:  Tor: 0.2.3.x-final
Component:  Tor Relay    |        Version:                    
 Keywords:               |         Parent:                    
   Points:               |   Actualpoints:                    
-------------------------+--------------------------------------------------
 In #4115 it was noted that bridges were using naked dirport connections.
 That was clearly a bug, and has been fixed.

 But it is less clear what public relays should do.

 In favor: encrypting dir fetches improves their resistance to tampering on
 the wire, including tampering of unauthenticated stuff like the X-Your-
 Address-Is and Date http headers.

 Against: it increases the load they place on the authorities, both in
 terms of CPU (all those bonus TLS handshakes) and sockets (since TLS
 connections are held open for a while).

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/4130>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online