[tor-bugs] #17193 [Tor]: Don't print bridge IPs/fingerprints in WARN/NOTICE log messages

[Tor Bug Tracker & Wiki]

#17193: Don't print bridge IPs/fingerprints in WARN/NOTICE log messages
-----------------------------------+---------------------
 Reporter:  isis                   |          Owner:
     Type:  defect                 |         Status:  new
 Priority:  normal                 |      Milestone:
Component:  Tor                    |        Version:
 Keywords:  tor-bridge 028-triage  |  Actual Points:
Parent ID:                         |         Points:
  Sponsor:                         |
-----------------------------------+---------------------
 By default, we currently print out bridge IP:ports and fingerprints in
 tor's log messages at the notice and warn levels. Users often
 [https://lists.torproject.org/pipermail/tor-
 talk/2015-September/039143.html copy+paste these logs to various public
 places] when trying to debug why their connection isn't working.

 I understand that this is probably useful information to give to the
 support desk for debugging why tor isn't working… but would it be doable
 to have the support people ask, ''"Hey could you add `SafeLogging 0` to
 your torrc?"'' or something?

 I think the default should be to sanitise bridge IP:ports and fingerprints
 at these levels.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/17193>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online