[tor-bugs] #23875 [Applications/Tor Browser]: Facebook's onion site is a single hop onion, but clicking on the Tor onion icon shows that it is a 6 hop circuit.

Tor Bug Tracker & Wiki blackhole at torproject.org
Fri Feb 14 10:39:55 UTC 2020


#23875: Facebook's onion site is a single hop onion, but clicking on the Tor onion
icon shows that it is a 6 hop circuit.
------------------------------------------+-------------------------------
 Reporter:  Dbryrtfbcbhgf                 |          Owner:  tbb-team
     Type:  defect                        |         Status:  new
 Priority:  Medium                        |      Milestone:
Component:  Applications/Tor Browser      |        Version:
 Severity:  Normal                        |     Resolution:
 Keywords:  tbb-circuit-display, ux-team  |  Actual Points:
Parent ID:                                |         Points:
 Reviewer:                                |        Sponsor:  Sponsor27-can
------------------------------------------+-------------------------------

Comment (by asn):

 Replying to [comment:13 arma]:
 > Replying to [comment:9 teor]:
 > > That's not quite true: the service will advertise that it *tries* to
 make one-hop circuits. But some circuits will be 3-hops if the rendezvous
 point is unreachable or fails.
 >
 > teor has a great point here: we can't actually know how many hops the
 service side circuit uses. So anything that we visualize for the user will
 be a metaphor, not an accurate depiction of the onion service's circuit.
 We don't know what the onion service is doing, and we can't know for sure,
 and that's one of the security properties.
 >
 > So my vote remains for leaving it as it is, or if we want to change it,
 to change it to some sort of "cloudy" thing that makes it clear we don't
 have good visibility on that half of the path.

 FWIW, v3 single onions actually specify they are single onions in the
 descriptor:
 https://github.com/torproject/torspec/blob/master/rend-spec-v3.txt#L1335

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/23875#comment:21>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list