[tor-bugs] #9854 [Tor]: Removing or not sanitizing ContactInfo lines in bridge descriptors

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed Oct 2 13:40:12 UTC 2013


#9854: Removing or not sanitizing ContactInfo lines in bridge descriptors
-------------------------+------------------------------
     Reporter:  karsten  |      Owner:
         Type:  defect   |     Status:  new
     Priority:  normal   |  Milestone:  Tor: unspecified
    Component:  Tor      |    Version:
   Resolution:           |   Keywords:  tor-bridge
Actual Points:           |  Parent ID:
       Points:           |
-------------------------+------------------------------

Comment (by phw):

 Replying to [ticket:9854 karsten]:
 >  1. We conclude we don't need the contact line for bridges, because we
 wouldn't contact the bridge operator anyway.  Bridges should remove that
 line from their descriptor before uploading.

 I don't think that's a good option. Especially with more and more
 pluggable transports emerging, it would certainly come in handy to be able
 to contact bridge operators.

 >  2. We decide this information is important and that we should have it
 available more easily.  We don't remove the `ContactInfo` line when we
 sanitize bridge descriptors.

 Personally, I'm leaning towards that option. It would be consistent with
 how we treat bridges, i.e., you don't get them easily but when you have
 one, it's almost like a relay. On the other hand, I have no strong
 feelings about this and there might be good arguments against it so the
 safe bet is probably option 3.

 > Here's a crazy idea: should we extract email addresses from bridge
 operators and ask them what they expected when writing their email
 addresses there?

 That would make sense. After all, that's what the ContactInfo is for,
 isn't it? :)

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/9854#comment:7>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list