torproject/tor
1
0
Fork 0
mirror of https://gitlab.torproject.org/tpo/core/tor.git synced 2024-12-06 19:41:15 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

a few more thoughts about seeds

Browse Source 
svn:r3399
This commit is contained in:
Roger Dingledine
2005-01-21 08:20:01 +00:00
parent d4d131cc83
commit 01cd23ef62
1 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
doc/dir-spec.txt
+6 -2
View File
@@ -106,8 +106,12 @@ Piece two: (optional)
and not fingerprints, it also means that dirservers can rotate their
signing keys transparently.
But, keeping track of the seed keys becomes a critical security issue;
and rotating them in a backward-compatible way adds complexity.
But, keeping track of the seed keys becomes a critical security issue.
And rotating them in a backward-compatible way adds complexity. Also,
dirserver locations must be at least somewhere static, since each lost
dirserver degrades reachability for old clients. So as the dirserver
list rolls over we have no choice but to put out new versions.
Piece three: (optional)