[tor-relays] Connections from UNKNOWN relays

[Rana]

-----Original Message-----
From: tor-relays [mailto:tor-relays-bounces at lists.torproject.org] On Behalf Of teor
Sent: Saturday, December 10, 2016 2:54 PM
To: tor-relays at lists.torproject.org
Subject: Re: [tor-relays] Connections from UNKNOWN relays


>> On 10 Dec. 2016, at 23:05, Rana <ranaventures at gmail.com> wrote:
>> 
> >Arm shows that my middle relay has incoming connections from UNKNOWN relays (no consensus data on them at all except locale). Are these bridges?
>
>Possibly, or they are relays that are not in the current consensus, but are in a consensus still being used by a client. (Clients will use consensuses up to 27 hours old, there is one consensus per hour.)

Assuming most of these are bridges, this could be a vulnerability as this allows rogue middle relays to enumerate bridges.