Require a threshold of exit nodes before building circuits

This mitigates an attack proposed by wanoskarnet, in which all of a
client's bridges collude to restrict the exit nodes that the client
knows about.  Fixes bug 5343.
This commit is contained in:
Nick Mathewson
2012-03-08 15:42:54 -05:00
parent fe50b676bc
commit ec8a06c5a1
2 changed files with 31 additions and 5 deletions
+7
View File
@@ -0,0 +1,7 @@
o Security fixes:
- Only build circuits if we have a sufficient threshold of the total
descriptors marked in the consensus with the "Exit" flag. This
mitigates an attack proposed by wanoskarnet, in which all of a
client's bridges collude to restrict the exit nodes that the
client knows about. Fixes bug 5343.