[tor-bugs] #10968 [Tor]: Authorities should use past consensuses to assign relay flags

[Tor Bug Tracker & Wiki]

#10968: Authorities should use past consensuses to assign relay flags
------------------------+--------------------------
     Reporter:  asn     |      Owner:
         Type:  task    |     Status:  new
     Priority:  normal  |  Milestone:  Tor: 0.2.???
    Component:  Tor     |    Version:
   Resolution:          |   Keywords:  tor-auth
Actual Points:          |  Parent ID:
       Points:          |
------------------------+--------------------------

Comment (by asn):

 Thinking about the implementation of the guard proposal. Here are some
 questions:

 a) How are we going to get past consesuses? AFAIK, directories don't keep
 and serve old consesuses. Is metrics.tpo the only place where we can get
 them? Is it reasonalbe to make metrics.tpo a single point of failure for
 this feature?

 b) We will need to verify the sigs of the past consesuses. Can arm verify
 signatures of Tor documents? Also, what can go wrong with verifying
 consesus sigs from many months ago? Have auths ever changed their identity
 keys? Also, what happens if we try to parse a badly-signed consesus?
 Should we just ignore it?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10968#comment:8>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online