[tor-bugs] #9854 [Tor]: Removing or not sanitizing ContactInfo lines in bridge descriptors

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed Oct 2 14:08:37 UTC 2013


#9854: Removing or not sanitizing ContactInfo lines in bridge descriptors
-------------------------+------------------------------
     Reporter:  karsten  |      Owner:
         Type:  defect   |     Status:  new
     Priority:  normal   |  Milestone:  Tor: unspecified
    Component:  Tor      |    Version:
   Resolution:           |   Keywords:  tor-bridge
Actual Points:           |  Parent ID:
       Points:           |
-------------------------+------------------------------

Comment (by rransom):

 Replying to [ticket:9854 karsten]:

 >  2. We decide this information is important and that we should have it
 available more easily.  We don't remove the `ContactInfo` line when we
 sanitize bridge descriptors.

 I thought a bridge descriptor's `contact` line was removed for the same
 reason that its nickname is redacted -- to prevent an attacker from
 learning that the bridge may be ‘near’ one or more relays.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/9854#comment:9>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list