Maximize Anonymity Services but Minimize 'Abuse Like' Behaviors...

Gregory Maxwell gmaxwell at gmail.com
Fri Jan 2 18:25:00 UTC 2009


On Fri, Jan 2, 2009 at 11:43 AM, Erik Heidt <erik.heidt at artofinfosec.com> wrote:
[snip]
> - Permitting exit to key informational resources (e.g. wikipedia services)
> - Permitting exit to top 5 or 10 web mail services (e.g. google mail,
> hotmail, yahoo, etc.)

And manage to make yourself look like someone doing a targeted MITM
attack on tor users.  :(

The above use cases should be handled by improving the exit enclave
support and convincing these sorts of major sites to run their own
exists.

If you'd like to cut abuse without looking like an attacker yourself
you're best off limiting your exit to ports which cause few abuse
complaints.  IRC and other chat protocols are probably good examples.



More information about the tor-talk mailing list