[tor-bugs] #6889 [Tor Hidden Services]: Warn if HSes are configured on a client with UseEntryGuards disabled

Tor Bug Tracker & Wiki torproject-admin at torproject.org
Sun Sep 23 09:45:49 UTC 2012


#6889: Warn if HSes are configured on a client with UseEntryGuards disabled
---------------------------------+------------------------------------------
 Reporter:  rransom              |          Owner:                    
     Type:  enhancement          |         Status:  needs_review      
 Priority:  normal               |      Milestone:  Tor: 0.2.4.x-final
Component:  Tor Hidden Services  |        Version:                    
 Keywords:                       |         Parent:                    
   Points:                       |   Actualpoints:                    
---------------------------------+------------------------------------------

Comment(by rransom):

 Replying to [comment:2 andrea]:
 > The code looks fine to me, but should this be stronger than a log
 warning perhaps?  If the user does this with a hidden service that anyone
 might care to try to locate, then by the time the user sees this message
 it's likely been exposed to the world like that at least briefly.
 >
 > Maybe we should disable the hidden service instead unless the user
 explicitly says "yeah, I asked for it, give it to me good and hard"
 somewhere?

 If this had gone into 0.2.4.3-alpha (along with the change which turned
 off UseEntryGuards for tor2web mode clients), that might have been
 beneficial.  But now, anyone who is going to be harmed by running hidden
 services on a Tor client without entry guards has already been screwed
 over, silently.  Disabling their hidden services or making their Tor
 client fail to start won't help them any more than a warning message will.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/6889#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list