tor/changes/reject-tap

  o Major bug fixes (circuit building):
    - Tor authorities, relays, and clients no longer support
      circuit-building using TAP. (The hidden service protocol
      still uses TAP.)
    - Relays make sure their own descriptor has an ntor key.
    - Authorites no longer trust the version a relay claims (if any),
      instead, they check specifically for an ntor key.
    - Clients avoid downloading a descriptor if the relay version is
      too old to support ntor.
    - Client code ignores nodes without ntor keys: they will not be
      selected during circuit-building, or as guards, or as directory
      mirrors, or as introduction or rendezvous points.
      Fixes bug 19163; bugfix on 0.2.4.18-rc.
Authorities reject descriptors without ntor keys Before, they checked for version 0.2.4.18-rc or later, but this would not catch relays without version lines, or buggy or malicious relays missing an ntor key. 2016-07-06 08:50:48 +02:00			`o Major bug fixes (circuit building):`
Relays make sure their own descriptor has an ntor key 2016-07-06 09:15:48 +02:00			`- Tor authorities, relays, and clients no longer support`
			`circuit-building using TAP. (The hidden service protocol`
			`still uses TAP.)`
			`- Relays make sure their own descriptor has an ntor key.`
			`- Authorites no longer trust the version a relay claims (if any),`
			`instead, they check specifically for an ntor key.`
Clients no longer download descriptors for relays without ntor 2016-07-06 09:32:57 +02:00			`- Clients avoid downloading a descriptor if the relay version is`
			`too old to support ntor.`
Clients avoid choosing nodes that can't do ntor If we know a node's version, and it can't do ntor, consider it not running. If we have a node's descriptor, and it doesn't have a valid ntor key, consider it not running. Refactor these checks so they're consistent between authorities and clients. 2016-07-07 04:58:47 +02:00			`- Client code ignores nodes without ntor keys: they will not be`
			`selected during circuit-building, or as guards, or as directory`
			`mirrors, or as introduction or rendezvous points.`
Authorities reject descriptors without ntor keys Before, they checked for version 0.2.4.18-rc or later, but this would not catch relays without version lines, or buggy or malicious relays missing an ntor key. 2016-07-06 08:50:48 +02:00			`Fixes bug 19163; bugfix on 0.2.4.18-rc.`