Commit Graph

2362 Commits

Author SHA1 Message Date
Roger Dingledine
3abafccd0e Start choosing which bridge to use proportional to its advertised
bandwidth, rather than uniformly at random. This should speed up Tor
for bridge users. Also do this for people who set StrictEntryNodes.


svn:r13486
2008-02-12 22:02:47 +00:00
Nick Mathewson
d3331b3c12 r18054@catbus: nickm | 2008-02-12 15:42:36 -0500
Clarify a non-obvious point in control-spec.txt; patch from mwenge.


svn:r13485
2008-02-12 20:42:40 +00:00
Nick Mathewson
f3eaeb99a3 r18051@catbus: nickm | 2008-02-12 15:20:43 -0500
Re-tune mempool parametes based on testing on peacetime: use smaller chuncks, free them a little more aggressively, and try very hard to concentrate allocations on fuller chunks.  Also, lots of new documentation.


svn:r13484
2008-02-12 20:20:52 +00:00
Nick Mathewson
c7537ae8be r18043@catbus: nickm | 2008-02-11 23:45:07 -0500
Update TODO with TLS progress.


svn:r13478
2008-02-12 04:45:11 +00:00
Nick Mathewson
ab0c85eea6 r14103@tombo: nickm | 2008-02-10 13:40:09 -0500
Fix some XXX020s in command.c, and make it not-allowed to negotiate v1 using the v2 connection protocol: it is too hard to test, and pointless to support.


svn:r13460
2008-02-10 18:40:29 +00:00
Roger Dingledine
50113a2842 other cleanups
svn:r13448
2008-02-09 17:56:52 +00:00
Roger Dingledine
2475e33124 defer two things from the 0.2.0 timeframe
svn:r13447
2008-02-09 17:50:57 +00:00
Nick Mathewson
e3f9c42668 r17993@catbus: nickm | 2008-02-08 18:41:50 -0500
note progress on tls work


svn:r13435
2008-02-08 23:41:52 +00:00
Nick Mathewson
de827f89df r14062@tombo: nickm | 2008-02-08 15:17:07 -0500
Change DNs in x509 certificates to be harder to fingerprint.  Raise common code.  Refactor random hostname generation into crypto.c


svn:r13429
2008-02-08 21:13:12 +00:00
Nick Mathewson
46b1a21dc4 r17955@catbus: nickm | 2008-02-06 16:53:07 -0500
The SSL portion of the revised handshake now seems to work: I just finally got a client and a server to negotiate versions.  Now to make sure certificate verification is really happening, connections are getting opened, etc.


svn:r13409
2008-02-06 21:53:13 +00:00
Nick Mathewson
a869574c56 r17947@catbus: nickm | 2008-02-06 11:57:53 -0500
Fix a bunch of DOCDOC items; document the --quiet flag; refactor a couple of XXXX020 items.


svn:r13405
2008-02-06 16:58:05 +00:00
Nick Mathewson
ff9bd0fd3a r17929@catbus: nickm | 2008-02-05 17:10:26 -0500
Fix or downgrade a few XXX020 items.


svn:r13393
2008-02-05 23:20:44 +00:00
Nick Mathewson
fac2cd3b03 r17916@catbus: nickm | 2008-02-05 16:29:35 -0500
Fix some XXX020 items in control.c: add a maximum line length and note that the number of versioning authorities is no longer apparent to clients.


svn:r13390
2008-02-05 21:39:49 +00:00
Nick Mathewson
bd5bcbdc09 r17912@catbus: nickm | 2008-02-05 15:57:51 -0500
Document truncation of version lines


svn:r13386
2008-02-05 21:39:38 +00:00
Roger Dingledine
12fbf01abe down to 24 pages
svn:r13290
2008-01-26 02:48:43 +00:00
Roger Dingledine
0ddd28b75e spec tweaks
svn:r13264
2008-01-24 22:47:39 +00:00
Roger Dingledine
d2a04d7e06 a new style file. and blow away a section that turned out to be dumb.
svn:r13223
2008-01-22 05:50:58 +00:00
Nick Mathewson
8505ee8310 r17723@catbus: nickm | 2008-01-22 00:14:57 -0500
Make idea proposal into proposal 130; answer question by sjmurdoch; mark 124 superseded; reindex


svn:r13222
2008-01-22 05:15:05 +00:00
Roger Dingledine
b79850d574 Make "ClientOnly 1" config option disable directory ports too.
svn:r13213
2008-01-21 21:00:50 +00:00
Roger Dingledine
e42a6794dc condense the rest of the discussion into proposal 129
svn:r13211
2008-01-21 17:36:47 +00:00
Roger Dingledine
10ed49643e proposal from Kevin Bauer & Damon McCoy to reject vulnerable-plaintext
ports (reformatted by me)


svn:r13210
2008-01-21 16:57:12 +00:00
Roger Dingledine
ff62154ba3 New config options WarnPlaintextPorts and RejectPlaintextPorts so
Tor can warn and/or refuse connections to ports commonly used with
vulnerable-plaintext protocols.

We still need to figure out some good defaults for them.


svn:r13198
2008-01-20 05:54:15 +00:00
Roger Dingledine
43dce232ad If we've gone 12 hours since our last bandwidth check, and we
estimate we have less than 50KB bandwidth capacity but we could
handle more, do another bandwidth test.


svn:r13176
2008-01-18 04:58:40 +00:00
Roger Dingledine
b4b3472b9f Make the tor-gencert man page get included correctly in the tarball.
svn:r13163
2008-01-17 20:32:37 +00:00
Roger Dingledine
8e601e0ae5 explain a bit about router descriptor purposes
svn:r13154
2008-01-17 05:47:44 +00:00
Roger Dingledine
a03d0e16e4 minor tweaks of the v2-conn-protocol text
svn:r13117
2008-01-12 19:50:52 +00:00
Nick Mathewson
01df4856f7 r17581@catbus: nickm | 2008-01-12 00:52:35 -0500
Actually write up what I'm implementing for the v2 connection protocol


svn:r13113
2008-01-12 05:53:03 +00:00
Roger Dingledine
23a891bf4d add in a pdf so it'll be in our svn
svn:r13103
2008-01-11 03:18:56 +00:00
Roger Dingledine
4cf1b35a23 start to flesh out the issues; and add some more
svn:r13101
2008-01-11 02:23:33 +00:00
Roger Dingledine
8435de3c78 add an outline for a new roadmap
svn:r13099
2008-01-10 19:08:07 +00:00
Nick Mathewson
10d86f7615 r17558@catbus: nickm | 2008-01-10 13:07:41 -0500
If we do not serve v2 directory info, and our cached v2 networkstatus files are very old, remove them.  If the directory is old, remove that too.  (We already did this for obsolete routers files.)


svn:r13096
2008-01-10 18:08:42 +00:00
Nick Mathewson
04263648c4 r17554@catbus: nickm | 2008-01-10 12:48:29 -0500
Do not send bridge descriptors over unencrypted connections.


svn:r13094
2008-01-10 17:48:40 +00:00
Nick Mathewson
29b0f51a73 r17553@catbus: nickm | 2008-01-10 12:18:27 -0500
Add connection_dir_is_encrypted() so that we can refrain from sending bridge descriptors over an unencrypted link.


svn:r13093
2008-01-10 17:48:36 +00:00
Nick Mathewson
59fdab43cd r17552@catbus: nickm | 2008-01-10 12:13:43 -0500
Make bridge geoip data get rounded up, not down.


svn:r13092
2008-01-10 17:48:32 +00:00
Nick Mathewson
c508fa5aec r17550@catbus: nickm | 2008-01-10 12:08:01 -0500
Add a manual page for tor-gencert.  Also implement the missing -s option in tor-gencert, and fix the info message for when no cert file is specified.


svn:r13091
2008-01-10 17:08:05 +00:00
Nick Mathewson
ca5f670fab r17548@catbus: nickm | 2008-01-10 11:08:12 -0500
Make proposal-109 behavior optional.


svn:r13090
2008-01-10 16:08:47 +00:00
Roger Dingledine
e3d4997960 work down todo list for more 0.2.0.x issues
svn:r13087
2008-01-09 22:38:04 +00:00
Roger Dingledine
f033bd062f remove some of the done items, in preparation for overhaul
svn:r13085
2008-01-09 15:11:49 +00:00
Roger Dingledine
c7df6b4908 remove some done things. move a lot more into the 0.2.1.x section.
there remain a bunch of things in the 0.2.0.x section that we should
either do or move into 0.2.1.x.


svn:r13084
2008-01-09 14:45:43 +00:00
Roger Dingledine
958c524a2b start a roadmap for 2008 and beyond. based on 2007 roadmap as
a starting point.


svn:r13083
2008-01-09 14:21:00 +00:00
Roger Dingledine
3618b7eac3 a few items done, another item we should do
svn:r13082
2008-01-09 13:59:20 +00:00
Roger Dingledine
c7d3c7acd2 another blog todo
svn:r13075
2008-01-08 17:33:09 +00:00
Roger Dingledine
80196fb9ab three blog-related todo items
svn:r13074
2008-01-08 13:21:49 +00:00
Nick Mathewson
dd35fe59c4 r17499@catbus: nickm | 2008-01-07 13:39:46 -0500
Bugfix on fix for 557: Make values containing special characters work right with getconf, setconf, and saveconf.  Document this in control-spec.txt


svn:r13056
2008-01-07 18:54:55 +00:00
Roger Dingledine
a516973275 first thoughts on rate limiting stream creations at exits
svn:r13048
2008-01-07 10:41:49 +00:00
Nick Mathewson
58de695f90 r15787@tombo: nickm | 2008-01-02 01:59:07 -0500
Allow config values in quotes to contain special characters, with full C escape syntax.  With tests.  Addresses bug 557.


svn:r13021
2008-01-02 06:59:15 +00:00
Andrew Lewman
99be6dae1e update the license for 2008, complete a todo.
svn:r13014
2008-01-01 04:27:13 +00:00
Andrew Lewman
0421e53c66 Fix a typo. Thanks sjmurdoch.
svn:r12978
2007-12-25 19:02:12 +00:00
Karsten Loesing
506a02d485 proposal 121: replaced misleading term "authentication" by "authorization", added some clarifications (comments by Sven Kaffille)
svn:r12967
2007-12-25 11:34:29 +00:00
Roger Dingledine
c6788cc0de The bridge GeoIP stats were counting other relays, for example
self-reachability and authority-reachability tests.


svn:r12960
2007-12-25 00:07:13 +00:00