[tor-bugs] #1938 [Tor Bridge]: UpdateBridgesFromAuthority dangerous

[Tor Bug Tracker & Wiki]

#1938: UpdateBridgesFromAuthority dangerous
---------------------------+------------------------------------------------
    Reporter:  arma        |       Owner:                    
        Type:  task        |      Status:  closed            
    Priority:  major       |   Milestone:  Tor: 0.2.3.x-final
   Component:  Tor Bridge  |     Version:                    
  Resolution:  fixed       |    Keywords:                    
      Parent:              |      Points:                    
Actualpoints:              |  
---------------------------+------------------------------------------------
Changes (by nickm):

  * status:  needs_review => closed
  * resolution:  => fixed


Comment:

 Replying to [comment:13 nickm]:
 > So, merging my patch as-is would (I think) solve the problem of making
 UpdateBridgesFromAuthority "safe".  But not actually "usable".  The
 solutions that would make it "usable" seem to be too much for 0.2.3.
 >
 > Would it be reasonable to merge my fix in 0.2.3, close this ticket, and
 open a new ticket to make UpdateBridgesFromAuthority usable?

 Doing that.  "UpdateBridgesFromAuthority" is now safe but not so usable.
 Making it usable is #6010, which is not for 0.2.3.x.

 Please shout if I'm doing something foolish here.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/1938#comment:14>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online