tor/changes/hsdir_assignment
Sebastian Hahn f7a3cdc8f2 Use observed instead of declared uptime for HSDir
It is important to verify the uptime claim of a relay instead of just
trusting it, otherwise it becomes too easy to blackhole a specific
hidden service. rephist already has data available that we can use here.

Bugfix on 0.2.0.10-alpha.
2011-03-11 18:44:35 +01:00

8 lines
395 B
Plaintext

o Security fixes:
- Directory authorities now use data collected from rephist when
choosing whether to assign the HSDir flag to relays, instead of
trusting the uptime value the relay reports in its descriptor.
This helps prevent an attack where relatively few malaicious
nodes can blackhole any given hidden service. Bugfix on
0.2.0.10-alpha; fixes bug 2709.