[tor-bugs] #6889 [Tor Hidden Services]: Warn if HSes are configured on a client with UseEntryGuards disabled
Tor Bug Tracker & Wiki
torproject-admin at torproject.org
Sun Sep 23 09:45:49 UTC 2012
#6889: Warn if HSes are configured on a client with UseEntryGuards disabled
---------------------------------+------------------------------------------
Reporter: rransom | Owner:
Type: enhancement | Status: needs_review
Priority: normal | Milestone: Tor: 0.2.4.x-final
Component: Tor Hidden Services | Version:
Keywords: | Parent:
Points: | Actualpoints:
---------------------------------+------------------------------------------
Comment(by rransom):
Replying to [comment:2 andrea]:
> The code looks fine to me, but should this be stronger than a log
warning perhaps? If the user does this with a hidden service that anyone
might care to try to locate, then by the time the user sees this message
it's likely been exposed to the world like that at least briefly.
>
> Maybe we should disable the hidden service instead unless the user
explicitly says "yeah, I asked for it, give it to me good and hard"
somewhere?
If this had gone into 0.2.4.3-alpha (along with the change which turned
off UseEntryGuards for tor2web mode clients), that might have been
beneficial. But now, anyone who is going to be harmed by running hidden
services on a Tor client without entry guards has already been screwed
over, silently. Disabling their hidden services or making their Tor
client fail to start won't help them any more than a warning message will.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/6889#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list