[tor-bugs] #21155 [Core Tor/Tor]: Similar to #14917: Client's choice of rend point can leak info about guard(s) of misconfigured hidden services with EntryNodes option

[Tor Bug Tracker & Wiki]

#21155: Similar to #14917: Client's choice of rend point can leak info about
guard(s) of misconfigured hidden services with EntryNodes option
-------------------------------+------------------------------------
 Reporter:  Jaym               |          Owner:
     Type:  defect             |         Status:  needs_review
 Priority:  Medium             |      Milestone:  Tor: 0.3.1.x-final
Component:  Core Tor/Tor       |        Version:
 Severity:  Normal             |     Resolution:
 Keywords:  tor-hs, tor-guard  |  Actual Points:
Parent ID:                     |         Points:  0.1
 Reviewer:                     |        Sponsor:
-------------------------------+------------------------------------
Changes (by dgoulet):

 * status:  needs_information => needs_review
 * points:   => 0.1


Comment:

 I went with a potential controversial patch ;). Warning the operator if
 `EntryNodes` are pinned. We already NOT allow it if only one entry node is
 pinned (#14917). It seems there are too many issues with pinned node so at
 the very least warn the operator.

 In the future, we might want a Wiki page explaining the dangers and
 pointing to that? What do we all think of this solution?

 See branch: `bug21155_031_01`

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/21155#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online