[tor-bugs] #23875 [Applications/Tor Browser]: Facebook's onion site is a single hop onion, but clicking on the Tor onion icon shows that it is a 6 hop circuit.

Tor Bug Tracker & Wiki blackhole at torproject.org
Mon Dec 16 21:42:35 UTC 2019


#23875: Facebook's onion site is a single hop onion, but clicking on the Tor onion
icon shows that it is a 6 hop circuit.
------------------------------------------+-------------------------------
 Reporter:  Dbryrtfbcbhgf                 |          Owner:  tbb-team
     Type:  defect                        |         Status:  new
 Priority:  Medium                        |      Milestone:
Component:  Applications/Tor Browser      |        Version:
 Severity:  Normal                        |     Resolution:
 Keywords:  tbb-circuit-display, ux-team  |  Actual Points:
Parent ID:                                |         Points:
 Reviewer:                                |        Sponsor:  Sponsor27-can
------------------------------------------+-------------------------------

Comment (by teor):

 Replying to [comment:13 arma]:
 > Replying to [comment:9 teor]:
 > > That's not quite true: the service will advertise that it *tries* to
 make one-hop circuits. But some circuits will be 3-hops if the rendezvous
 point is unreachable or fails.
 >
 > teor has a great point here: we can't actually know how many hops the
 service side circuit uses. So anything that we visualize for the user will
 be a metaphor, not an accurate depiction of the onion service's circuit.
 We don't know what the onion service is doing, and we can't know for sure,
 and that's one of the security properties.
 >
 > So my vote remains for leaving it as it is, or if we want to change it,
 to change it to some sort of "cloudy" thing that makes it clear we don't
 have good visibility on that half of the path.

 What does Tor browser currently do if an exit circuit uses 4 hops?

 I think it's ok to:
 * change it to something that symbolises the uncertainly: it could be a
 direct connection, it could be 3-4 hops
 * add a link to a "what is an onion service" doc that explains what we
 can't know
 * do nothing

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/23875#comment:18>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list