[tor-bugs] #21864 [Core Tor/Tor]: Support Bridges setting MyFamily to include Relays

Tor Bug Tracker & Wiki blackhole at torproject.org
Tue Apr 4 22:44:53 UTC 2017


#21864: Support Bridges setting MyFamily to include Relays
--------------------------+---------------------
 Reporter:  isis          |          Owner:
     Type:  defect        |         Status:  new
 Priority:  Medium        |      Milestone:
Component:  Core Tor/Tor  |        Version:
 Severity:  Normal        |     Resolution:
 Keywords:  intro, 15min  |  Actual Points:
Parent ID:                |         Points:  0.5
 Reviewer:                |        Sponsor:
--------------------------+---------------------

Comment (by isis):

 Replying to [comment:4 arma]:
 > Replying to [ticket:21864 isis]:
 > > 1) Warn bridge operators not to include ''other'' bridges in MyFamily,
 but let them know that including relays is fine. We should continue to
 warn them not to list any bridge in the MyFamily of a public relay.
 > > 2) Allow bridges to specify MyFamily.
 >
 > The MyFamily references, as currently designed, need to be
 bidirectional. Otherwise you could set up a bridge and request that
 anybody who uses your bridge should never use the following (innocent,
 unrelated, target) relays in their circuit, and really mess with path
 selection.

 Yes, and there are also other ways to mess with someone's path selection
 if you're their guard/bridge. Not that that means we should make it easier
 for them to do so, but I feel like a malicious bridge is going to behave
 maliciously no matter what we do with the MyFamily setting.

 > See #15060 for more discussion.

 I'm not sure if "Wait for us to do something with a vague, two-years-old
 ticket" is the best response to "We have way more money than we thought
 and we want to give you free bandwidth"?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/21864#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list