Commit Graph

324 Commits

Author SHA1 Message Date
Roger Dingledine
10ed49643e proposal from Kevin Bauer & Damon McCoy to reject vulnerable-plaintext
ports (reformatted by me)


svn:r13210
2008-01-21 16:57:12 +00:00
Roger Dingledine
ff62154ba3 New config options WarnPlaintextPorts and RejectPlaintextPorts so
Tor can warn and/or refuse connections to ports commonly used with
vulnerable-plaintext protocols.

We still need to figure out some good defaults for them.


svn:r13198
2008-01-20 05:54:15 +00:00
Roger Dingledine
8e601e0ae5 explain a bit about router descriptor purposes
svn:r13154
2008-01-17 05:47:44 +00:00
Roger Dingledine
a03d0e16e4 minor tweaks of the v2-conn-protocol text
svn:r13117
2008-01-12 19:50:52 +00:00
Nick Mathewson
01df4856f7 r17581@catbus: nickm | 2008-01-12 00:52:35 -0500
Actually write up what I'm implementing for the v2 connection protocol


svn:r13113
2008-01-12 05:53:03 +00:00
Nick Mathewson
dd35fe59c4 r17499@catbus: nickm | 2008-01-07 13:39:46 -0500
Bugfix on fix for 557: Make values containing special characters work right with getconf, setconf, and saveconf.  Document this in control-spec.txt


svn:r13056
2008-01-07 18:54:55 +00:00
Roger Dingledine
a516973275 first thoughts on rate limiting stream creations at exits
svn:r13048
2008-01-07 10:41:49 +00:00
Karsten Loesing
506a02d485 proposal 121: replaced misleading term "authentication" by "authorization", added some clarifications (comments by Sven Kaffille)
svn:r12967
2007-12-25 11:34:29 +00:00
Roger Dingledine
74d05f4b2c answer getinfo ns/purpose/bridge queries
svn:r12860
2007-12-18 22:39:15 +00:00
Roger Dingledine
71c84abdff cleanups on r12825
svn:r12826
2007-12-15 20:50:56 +00:00
Roger Dingledine
31324f3e7f apply karsten's "patch 12"
svn:r12825
2007-12-15 20:28:09 +00:00
Karsten Loesing
5864b43e02 proposal 121: rewrote complete proposal for better readability, modified authentication protocol, merged in personal notes
svn:r12824
2007-12-15 20:09:43 +00:00
Roger Dingledine
2cdaa93d96 change the specs to match the code
svn:r12799
2007-12-13 05:47:08 +00:00
Roger Dingledine
6e799a6e9c minor cleanups and a todo item
svn:r12785
2007-12-12 21:08:30 +00:00
Roger Dingledine
1572de49bc write down my some reliable / some not idea, before we lose it
svn:r12781
2007-12-12 17:02:47 +00:00
Nick Mathewson
b865587265 r15268@tombo: nickm | 2007-12-11 18:22:52 -0500
tweaks to bridge-disbursement document


svn:r12774
2007-12-11 23:23:25 +00:00
Roger Dingledine
ee6ae92670 New config options AuthDirBadDir and AuthDirListBadDirs for
authorities to mark certain relays as "bad directories" in the
networkstatus documents. Also supports the "!baddir" directive in
the approved-routers file.


svn:r12754
2007-12-10 16:49:54 +00:00
Karsten Loesing
6bf8e8aec3 proposal 121: incorporated comments by Nick posted to or-dev on 10-Oct-2007
svn:r12725
2007-12-09 00:18:51 +00:00
Roger Dingledine
88fa4417e3 attacks and cleanups on the bridge disbursement plans
svn:r12720
2007-12-08 04:13:07 +00:00
Roger Dingledine
9250653471 cleanups on r12715
svn:r12718
2007-12-08 00:55:18 +00:00
Nick Mathewson
2dd9d87d07 r15220@tombo: nickm | 2007-12-07 19:53:27 -0500
add draft sketch of bridge disbursement designs.


svn:r12717
2007-12-08 00:53:43 +00:00
Roger Dingledine
2b8ca7b4a4 patch from karsten to clean up documentation and to integrate
more fixes into rend-spec.txt.


svn:r12715
2007-12-07 21:27:58 +00:00
Roger Dingledine
75c38a2c88 Bridges now behave like clients with respect to time intervals for
downloading new consensus documents. Bridge users now wait until
the end of the interval, so their bridge will be sure to have a
new consensus document.


svn:r12696
2007-12-06 17:01:16 +00:00
Roger Dingledine
8b2585854a more work on the dirport-mirrors-downloads proposal. still not
really solved well yet.


svn:r12690
2007-12-06 10:54:57 +00:00
Roger Dingledine
8de470cf69 Add "GETINFO/desc-annotations/id/<OR digest>" so controllers can
ask about source, timestamp of arrival, purpose, etc. We need
something like this to help Vidalia not do GeoIP lookups on bridge 
addresses.


svn:r12687
2007-12-06 07:15:06 +00:00
Roger Dingledine
3ff63b6f4e When the DANGEROUS_VERSION controller status event told us we're
running an obsolete version, it used the string "OLD" to describe
it. Yet the "getinfo" interface used the string "OBSOLETE". Now use
"OBSOLETE" in both cases.


svn:r12686
2007-12-05 19:32:58 +00:00
Roger Dingledine
2d52336b60 make a new 'ideas' subdir for half-baked proposals.
make a new 'draft' status for nearly-baked proposals.


svn:r12677
2007-12-05 06:00:03 +00:00
Nick Mathewson
b6a194f896 svn:r12671 2007-12-04 19:38:42 +00:00
Roger Dingledine
4a03959b10 a few more thoughts on mirroring dist/ on bridges
svn:r12667
2007-12-04 18:34:30 +00:00
Roger Dingledine
9f25d3b0a6 notes on an auto updater. not enough of a proposal to give
it a number yet though.


svn:r12662
2007-12-04 13:18:32 +00:00
Roger Dingledine
52e0bc69c0 some very early notes on bridge families
svn:r12645
2007-12-03 11:40:27 +00:00
Roger Dingledine
9db8ee8427 propsets
svn:r12644
2007-12-03 11:18:44 +00:00
Roger Dingledine
628697acfa come up with a plan for publishing ip-to-country usage summaries
svn:r12642
2007-12-03 06:03:56 +00:00
Roger Dingledine
c8b4d43262 some notes on tor dist/ and website/ mirrors via dir caches
svn:r12640
2007-12-02 14:41:39 +00:00
Roger Dingledine
25a43314d1 another attack on bridges. darn it.
svn:r12639
2007-12-02 13:51:16 +00:00
Roger Dingledine
e9b999ff22 and one last fix
svn:r12610
2007-11-29 16:16:50 +00:00
Roger Dingledine
996b8719e5 fix some typos (i think) in the dir spec. also, note that you'd
better *not* publish a cosmetically similar descriptor within 12
hours of the last one.


svn:r12605
2007-11-29 13:19:11 +00:00
Roger Dingledine
b258d3ec5a is this a good idea, karsten/nick?
svn:r12604
2007-11-29 13:05:52 +00:00
Roger Dingledine
ff981c8805 doc fixes from karsten
svn:r12603
2007-11-29 12:51:50 +00:00
Roger Dingledine
4a08380ad7 controllers need a way to learn router annotations
svn:r12602
2007-11-29 11:35:08 +00:00
Roger Dingledine
30cbcaecc5 more progress on the geoip proposal
svn:r12599
2007-11-29 06:14:41 +00:00
Roger Dingledine
17393b8359 draft of a proposal: Fetching GeoIP databases for clients, relays, and bridges
svn:r12566
2007-11-24 15:28:08 +00:00
Roger Dingledine
5b3cc6cd7e move the bridges proposal into a real proposal number.
svn:r12562
2007-11-23 23:40:21 +00:00
Roger Dingledine
3c0013b47a explain how to become a bridge authority too
svn:r12482
2007-11-11 20:33:17 +00:00
Roger Dingledine
b3618cccf5 finish writing my overview of bridge design and deployment
svn:r12481
2007-11-11 20:12:32 +00:00
Nick Mathewson
e0b9c893bc r16573@catbus: nickm | 2007-11-08 11:57:16 -0500
Mess with the formula for the Guard flag again.  Now it requires that you be in the most familiar 7/8 of nodes, and have above median wfu for that 7/8th.  See spec for details.  Also, log thresholds better.


svn:r12440
2007-11-08 16:58:59 +00:00
Nick Mathewson
0fa00d8ec6 r16479@catbus: nickm | 2007-11-06 18:10:02 -0500
Add "Blocking resistant TLS certificate usage" as proposal 124.


svn:r12405
2007-11-06 23:11:12 +00:00
Roger Dingledine
8cc70addd7 minor fix
svn:r12367
2007-11-04 00:15:17 +00:00
Roger Dingledine
42e4acc41a get my in-progress bridge proposal draft into svn so i don't
lose it


svn:r12347
2007-11-02 19:21:42 +00:00
Nick Mathewson
dddff3acf9 r14625@tombo: nickm | 2007-11-01 23:21:25 -0400
Merge revised behavior on proposal 105


svn:r12323
2007-11-02 03:21:54 +00:00
Nick Mathewson
57f7c852f8 r16282@catbus: nickm | 2007-10-30 14:28:58 -0400
Implement lots of proposal 105.  None of it is enabled yet.


svn:r12285
2007-10-30 18:31:30 +00:00
Nick Mathewson
c0c2001a5b r16279@catbus: nickm | 2007-10-30 11:14:29 -0400
Improved skew reporting:  "You are 365 days in the duture" is more useful than "You are 525600 minutes in the future".  Also, when we get something that proves we are at least an hour in the past, tell the controller "CLOCK_SKEW MIN_SKEW=-3600" rather than just "CLOCK_SKEW"


svn:r12283
2007-10-30 15:17:07 +00:00
Nick Mathewson
7709fb7143 r16278@catbus: nickm | 2007-10-30 09:46:28 -0400
Accept future networkstatus documents, but warn about skew when we get them.


svn:r12282
2007-10-30 15:17:01 +00:00
Andrew Lewman
28652aec69 And more places with the wrong url, now updated.
svn:r12267
2007-10-29 01:08:22 +00:00
Nick Mathewson
c58675ca72 r16236@catbus: nickm | 2007-10-28 14:36:30 -0400
Patch from Karsten Loesing: encode and parse v2 rendezvous descriptors.


svn:r12254
2007-10-28 19:48:14 +00:00
Nick Mathewson
665aa7659c r16234@catbus: nickm | 2007-10-28 14:27:22 -0400
Clean up a couple of comments from r12244.


svn:r12253
2007-10-28 18:29:29 +00:00
Roger Dingledine
e5885deab5 Separate "SOCKS_COMMAND_CONNECT_DIR" into two flags in
edge_connection_t: want_onehop if it must attach to a circuit with
only one hop (e.g. for the current tunnelled connections that use
begin_dir), and use_begindir if we mean to use a BEGIN_DIR relay
command to establish the stream rather than the normal BEGIN. Now
we can make anonymized begin_dir connections for (e.g.) more secure
hidden service posting and fetching.


svn:r12244
2007-10-28 08:16:19 +00:00
Nick Mathewson
8fa7071121 r16195@catbus: nickm | 2007-10-26 18:48:52 -0400
base "Guard" flag on WFU rather than MTBF.  Note an issue in the TODO. Roger: thoughts?


svn:r12219
2007-10-26 22:50:42 +00:00
Nick Mathewson
2c1d7cf674 r16194@catbus: nickm | 2007-10-26 18:37:02 -0400
Keep circuitless TLS connections open for 1.5 x MaxCircuitDirtiness: this ensures that we don't thrash closing and repoening connections to our guards.


svn:r12218
2007-10-26 22:50:40 +00:00
Roger Dingledine
ea4c3d6d1d finish cleaning up r12175
svn:r12179
2007-10-25 04:17:59 +00:00
Roger Dingledine
ae7ef3fc6a ispell dir-spec; inspired by r12175.
svn:r12178
2007-10-25 04:01:08 +00:00
Nick Mathewson
4615155ef1 r16136@catbus: nickm | 2007-10-24 23:40:15 -0400
Proposal 103 is closed too: it has been implemented and merged into dir-spec.  Proposal 111 is "finished": it has been implemented, but still needs to be merged into the spec.


svn:r12177
2007-10-25 03:41:30 +00:00
Nick Mathewson
6db2e1fa15 r16135@catbus: nickm | 2007-10-24 23:36:55 -0400
Proposals 101 and 104 are now implemented and merged into dir-spec.txt.


svn:r12176
2007-10-25 03:41:28 +00:00
Nick Mathewson
766c41c820 r16134@catbus: nickm | 2007-10-24 23:34:59 -0400
Merge 122 into dir-spec.txt; mark it closed.


svn:r12175
2007-10-25 03:41:25 +00:00
Roger Dingledine
7ba52e9db1 <edmanm> 3. Commands
<edmanm> All commands and other keywords are case-insensitive.
<edmanm> that lying control-spec.txt!
<edmanm> getinfo Address
<edmanm> 552 Unrecognized key "Address"
<edmanm> getinfo address
<edmanm> 250-address=72.230.11.78
<edmanm> 250 OK


svn:r12140
2007-10-24 07:22:33 +00:00
Roger Dingledine
fd91164662 trivial changes that have been sitting in my sandbox
svn:r12135
2007-10-24 03:31:12 +00:00
Nick Mathewson
eba143611b r16053@catbus: nickm | 2007-10-22 20:20:23 -0400
Note that consensus-method is not a means for making backward-incompatible format changes.  Because any point that confuses Roger will *definitely* confuse many non-Roger readers of dir-spec.txt ;)


svn:r12112
2007-10-23 00:23:32 +00:00
Nick Mathewson
5f8f498207 r15968@catbus: nickm | 2007-10-19 14:39:51 -0400
Implement code to compute which method to use to compute a consensus. Also, fix leak in consensus calculation.


svn:r12054
2007-10-19 18:56:30 +00:00
Nick Mathewson
7bb202fd19 r15965@catbus: nickm | 2007-10-19 13:32:11 -0400
Client-side implementation for proposal 122.


svn:r12051
2007-10-19 18:56:24 +00:00
Nick Mathewson
106e01db3d r15956@catbus: nickm | 2007-10-19 11:18:14 -0400
Encode address in certificates.  Also, make it possible to create certs reusing an old key.


svn:r12046
2007-10-19 16:28:10 +00:00
Peter Palfrader
fb295ba4dd typo
svn:r12044
2007-10-19 02:31:43 +00:00
Nick Mathewson
90de3ca9ae r15938@catbus: nickm | 2007-10-18 22:04:59 -0400
Misc clarifications and corrections in dir-spec.txt


svn:r12040
2007-10-19 02:15:43 +00:00
Roger Dingledine
0a865bc277 various fixes from reading or-cvs the past few days
svn:r12035
2007-10-18 23:14:58 +00:00
Peter Palfrader
0e0ca9700b Ammend 122 (Unnamed flag) with v2 discussion
svn:r12032
2007-10-18 19:24:05 +00:00
Nick Mathewson
9265b52afa r15931@catbus: nickm | 2007-10-18 14:34:05 -0400
Changes to proposal 105 based on recent or-dev exchange with sjmurdoch.


svn:r12031
2007-10-18 18:35:06 +00:00
Nick Mathewson
b5fefbeee5 r15921@catbus: nickm | 2007-10-18 11:16:38 -0400
Apply clarifications and comments from Karsten to rend-spec, with my own clarifications and comments.


svn:r12027
2007-10-18 18:15:01 +00:00
Nick Mathewson
b0d1b73b9a r15891@catbus: nickm | 2007-10-17 17:46:40 -0400
Apply changes to rend-spec.txt from Karsten's proposal-114 work.  Points that need to be clarified are marked with a [XXXX].


svn:r12007
2007-10-17 21:47:28 +00:00
Nick Mathewson
bbff989c1a r15857@catbus: nickm | 2007-10-16 12:59:13 -0400
Add proposal 123-autonaming.txt


svn:r11988
2007-10-16 16:59:42 +00:00
Roger Dingledine
3977ccbc80 Controllers should now specify cache=no or cache=yes when using
the +POSTDESCRIPTOR command.


svn:r11892
2007-10-12 07:57:29 +00:00
Roger Dingledine
ad8757fbeb Disable the SETROUTERPURPOSE controller command: it is now obsolete.
svn:r11891
2007-10-11 22:19:47 +00:00
Nick Mathewson
6670122619 r14885@Kushana: nickm | 2007-10-11 10:36:16 -0400
Document minimal values for voting times.  Use a macro instead of a magic number.  Remove an "enforce this" xxxx020 that was already enforced.


svn:r11868
2007-10-11 16:06:42 +00:00
Roger Dingledine
8effa68b73 make a note in proposal 109 so we limit the number of
confused researchers


svn:r11844
2007-10-10 19:59:55 +00:00
Nick Mathewson
069898a4b8 r15617@catbus: nickm | 2007-10-09 22:30:22 -0400
Add small comments to a couple of proposals.


svn:r11827
2007-10-10 02:30:34 +00:00
Nick Mathewson
f3139b3dbc r15612@catbus: nickm | 2007-10-09 19:11:55 -0400
Clarify proposal 122 and add another note.


svn:r11824
2007-10-09 23:12:04 +00:00
Roger Dingledine
6f7c68e62f update proposal 122 based on
http://archives.seul.org/or/dev/Oct-2007/msg00006.html


svn:r11822
2007-10-09 22:49:30 +00:00
Nick Mathewson
c03d0f9e83 r15603@catbus: nickm | 2007-10-09 17:02:27 -0400
Clarify "median".


svn:r11819
2007-10-09 21:02:32 +00:00
Nick Mathewson
9f9b729141 r15533@catbus: nickm | 2007-10-04 12:30:21 -0400
Add 122-unnamed-flag.txt


svn:r11762
2007-10-04 16:36:53 +00:00
Nick Mathewson
f4f780b526 r15510@catbus: nickm | 2007-10-02 16:14:42 -0400
Add support for more vote URLs that weasel wanted.  Weasel: please test this before I inflict it on anybody else. :)


svn:r11749
2007-10-02 20:19:43 +00:00
Peter Palfrader
5ba6fd9e7b Add a "fingerprint" in a smart place
svn:r11670
2007-09-27 16:45:15 +00:00
Nick Mathewson
33b715f91b r15416@catbus: nickm | 2007-09-27 12:30:19 -0400
Fix a copy-paste error in dir-spec.txt


svn:r11667
2007-09-27 16:34:02 +00:00
Nick Mathewson
d87a91b822 r15381@catbus: nickm | 2007-09-26 10:48:00 -0400
Add hidden-service-authentication.etxt as proposal 121.


svn:r11653
2007-09-26 14:52:10 +00:00
Nick Mathewson
ad11e9d0f1 r15310@catbus: nickm | 2007-09-24 11:36:08 -0400
Patch from Robert Hogan: fix a couple of status-event related typos. Backport candidate.


svn:r11604
2007-09-24 15:41:20 +00:00
Roger Dingledine
b29cf4cc05 a dir-spec typo (in two places) caught by steve
svn:r11557
2007-09-21 17:23:14 +00:00
Roger Dingledine
2a2cee9e51 Start using the v2 intro format for hidden service connections. Now
clients specify their chosen rendezvous point by identity digest
rather than by (potentially ambiguous) nickname. This change could
speed up hidden service connections dramatically.


svn:r11499
2007-09-18 23:48:39 +00:00
Roger Dingledine
82da6c02ba clean up r11496
svn:r11498
2007-09-18 23:34:27 +00:00
Roger Dingledine
eb9dc12ce9 Drop support for v1 rendezvous descriptors, since we never used
them anyway, and the code has probably rotted by now. Based on
patch from Karsten Loesing.


svn:r11496
2007-09-18 21:17:45 +00:00
Roger Dingledine
5985135ed6 two dir-spec cleanups from steve
svn:r11485
2007-09-18 16:05:39 +00:00
Nick Mathewson
f45dec1690 r15143@catbus: nickm | 2007-09-18 11:49:46 -0400
Add getinfo status/good-server-descriptor and status/reachability-succeeded. Patch from Robert Hogan.


svn:r11483
2007-09-18 15:53:55 +00:00
Nick Mathewson
91f83cfc2d r14830@catbus: nickm | 2007-08-29 13:50:10 -0400
Make controllers accept LF as well as CRLF.  Update spec to reflect this.  Remove now-dead code.  Make controller warning about v0 protocol more accurate.


svn:r11299
2007-08-29 19:02:33 +00:00
Nick Mathewson
7efc165095 r14204@Kushana: nickm | 2007-08-24 10:24:36 -0400
Fix a bug in last patch; add support for getting extrainfo documents by the control port (since it is silly to tell tools to do it without actually giving them an interface).


svn:r11270
2007-08-24 14:41:15 +00:00