[tor-relays] TOR router install without access to root

Green Dream greendream848 at gmail.com
Wed May 25 20:22:48 UTC 2016


@Paul: sure. Nils pointed out that a lot of relays using the same hosting
provider could be an attack vector, because the provider would be a single
point where all the relays' secret keys could be collected. My point is
that if you look at the AS (Autonomous System) Number, it's normally the
same for all the hosting provider's servers in that country. So if Tor path
selection looks at the AS, and avoids building a circuit that uses two
nodes from the same AS, this attack vector basically goes away. It's worth
noting if you weren't already aware, both Atlas and Globe display the AS
Number for every relay.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.torproject.org/pipermail/tor-relays/attachments/20160525/c2ea1263/attachment.html>


More information about the tor-relays mailing list