[tor-bugs] #21989 [Core Tor/Tor]: Should we tell Exits to reject all traffic if DNS fails?

[Tor Bug Tracker & Wiki]

#21989: Should we tell Exits to reject all traffic if DNS fails?
-------------------------------------------------+-------------------------
 Reporter:  teor                                 |          Owner:  (none)
     Type:  enhancement                          |         Status:  new
 Priority:  Medium                               |      Milestone:  Tor:
                                                 |  unspecified
Component:  Core Tor/Tor                         |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  dns, tor-exit, reliability self-     |  Actual Points:
  test                                           |
Parent ID:                                       |         Points:  1
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by micah):

 Replying to [comment:9 cypherpunks]:
 > relays with Exit flag are still useful as Exits for IP destination
 traffic.

 That is undeniable, however what is at issue is how useful is that for the
 network, when the other pieces do not work.

 Consider a relay with an Exit flag that only resolves DNS, but doesn't
 pass traffic. That doesn't seem particularly useful to the network, but it
 does resolve DNS queries.

 I don't think anyone is thinking, "What I'd like is a anonymity network
 that will only pass IP traffic, and not resolve DNS in any meaningful way"

 I think the network is only useful if it works for people who want to have
 functioning DNS resolution, but also those who are fine not having it, but
 not one at the expense of the other.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/21989#comment:10>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online