[tor-bugs] #9072 [Tor]: #9063 enables Guard discovery in about an hour by websites

[Tor Bug Tracker & Wiki]

#9072: #9063 enables Guard discovery in about an hour by websites
----------------------+-----------------------------------------------------
 Reporter:  arma      |          Owner:                     
     Type:  defect    |         Status:  needs_review       
 Priority:  critical  |      Milestone:  Tor: 0.2.3.x-final 
Component:  Tor       |        Version:  Tor: 0.2.4.13-alpha
 Keywords:            |         Parent:                     
   Points:            |   Actualpoints:                     
----------------------+-----------------------------------------------------

Comment(by nickm):

 robgjansen wrote:

 >I guess authenticated SNEDMEs, where the exit inserts a 1 byte nonce into
 every 100th cell and won't increase the package window unless the SENDME
 contains the nonce, is also off of the table since like the queue length
 limit defense, it doesn't handle non-data cells.
 >I imagine its not a simple fix, but what are the other problems with
 making all classes of relay cells count against the circuit package
 window?

 The biggest problems I know with each of these are the migration issues.
 We can't require that clients and exits use them until all clients and
 exits support them.  That doesn't make them complete non-starters, but it
 does keep us from deploying them any time, say, in the next two weeks. :)

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/9072#comment:21>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online