changelog and spec changes for the .exit fix

This commit is contained in:
Roger Dingledine 2009-08-26 15:43:18 -04:00
parent 5308eceef3
commit b7e8a4631f
2 changed files with 10 additions and 1 deletions

View File

@ -1,4 +1,10 @@
Changes in version 0.2.2.1-alpha - 2009-08-26 Changes in version 0.2.2.1-alpha - 2009-08-26
o Security fixes:
- Start the process of disabling ".exit" address notation, since it
can be used for a variety of esoteric application-level attacks
on users. To reenable it, set "AllowDotExit 1" in your torrc. Fix
on 0.0.9rc5.
o New directory authorities: o New directory authorities:
- Set up urras (run by Jacob Appelbaum) as the seventh v3 directory - Set up urras (run by Jacob Appelbaum) as the seventh v3 directory
authority. authority.

View File

@ -33,10 +33,13 @@
"www.google.com.foo.exit=64.233.161.99.foo.exit" to speed subsequent "www.google.com.foo.exit=64.233.161.99.foo.exit" to speed subsequent
lookups. lookups.
The .exit notation is disabled by default as of Tor 0.2.2.1-alpha, due
to potential application-level attacks.
EXAMPLES: EXAMPLES:
www.example.com.exampletornode.exit www.example.com.exampletornode.exit
Connect to www.example.com from the node called "exampletornode." Connect to www.example.com from the node called "exampletornode".
exampletornode.exit exampletornode.exit