[tor-bugs] #3723 [Core Tor/Tor]: Report version of bwscanners in votes

[Tor Bug Tracker & Wiki]

#3723: Report version of bwscanners in votes
-------------------------------------------------+-------------------------
 Reporter:  mikeperry                            |          Owner:  (none)
     Type:  enhancement                          |         Status:
                                                 |  merge_ready
 Priority:  Medium                               |      Milestone:  Tor:
                                                 |  0.3.5.x-final
Component:  Core Tor/Tor                         |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  tor-bwauth, 035-triaged-in-20180711  |  Actual Points:
Parent ID:  #25925                               |         Points:
 Reviewer:  teor                                 |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by teor):

 Replying to [comment:42 juga]:
 > Replying to [comment:40 nickm]:
 > > I mean, would we ever want to have a field that would be part of the
 bandwidth file, but _not_ copied into the vote?
 >
 > i can not find a reason for that right now. I guess if we need it at
 some point, we would need to change the spec and this code again.

 The current headers don't contain any sensitive information:
 https://gitweb.torproject.org/torspec.git/tree/bandwidth-file-
 spec.txt#n105

 Also, we want to make the entire bandwidth file public, see #21377 and:
 https://gitweb.torproject.org/torspec.git/tree/proposals/296-expose-
 bandwidth-files.txt

 But before we make the entire file public, we need to work out if the
 individual relay bandwidths make it easier to run attacks, see #26904.

 If you'd like, we could update the bandwidth file spec to say that the
 headers and the file content are public.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3723#comment:43>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online