tor/changes/hsdir_assignment

  o Security fixes:
    - Directory authorities now use data collected from rephist when
      choosing whether to assign the HSDir flag to relays, instead of
      trusting the uptime value the relay reports in its descriptor.
      This helps prevent an attack where relatively few malaicious
      nodes can blackhole any given hidden service. Bugfix on
      0.2.0.10-alpha; fixes bug 2709.
Use observed instead of declared uptime for HSDir It is important to verify the uptime claim of a relay instead of just trusting it, otherwise it becomes too easy to blackhole a specific hidden service. rephist already has data available that we can use here. Bugfix on 0.2.0.10-alpha. 2011-03-09 11:34:04 +01:00			`o Security fixes:`
			`- Directory authorities now use data collected from rephist when`
			`choosing whether to assign the HSDir flag to relays, instead of`
			`trusting the uptime value the relay reports in its descriptor.`
			`This helps prevent an attack where relatively few malaicious`
			`nodes can blackhole any given hidden service. Bugfix on`
			`0.2.0.10-alpha; fixes bug 2709.`