Commit Graph

706 Commits

Author SHA1 Message Date
Paul Syverson f4e1bdb02b Hack. Hack. Mostly on analysis and attacks. Third commit try's a charm?
svn:r707
2003-11-01 22:34:23 +00:00
Nick Mathewson ab7ee4d1a3 Edit and expand sections 5,6, and 10.
svn:r706
2003-11-01 21:19:46 +00:00
Roger Dingledine 6e3daf6bdb clean up bibtex
svn:r705
2003-11-01 08:48:12 +00:00
Roger Dingledine e20fdb3b6a cite the anonnet i meant to cite.
svn:r704
2003-11-01 08:05:21 +00:00
Roger Dingledine e6f621bbef mess with the formatting in sec9
svn:r703
2003-11-01 07:52:51 +00:00
Nick Mathewson 80cb91b2bc Retitle and write section 8.
svn:r702
2003-11-01 06:47:19 +00:00
Nick Mathewson 289c558117 Add goals to rendezvous pts; other cleanups
svn:r701
2003-11-01 03:44:13 +00:00
Roger Dingledine 0e43415b39 clean up sec1, part of sec2
svn:r700
2003-11-01 03:40:20 +00:00
Nick Mathewson 2065a5240f Fill out section 5.1, some of which should move into 2, 3, or 4.
svn:r699
2003-11-01 03:06:23 +00:00
Nick Mathewson 5c98821ee8 More work to section 4; more is needed. Moving to pen and paper: I need to re-read this several more times before I know what to change.
svn:r698
2003-10-31 06:56:52 +00:00
Roger Dingledine a21880133e formatting and partial typo fixing
svn:r697
2003-10-31 06:16:21 +00:00
Nick Mathewson 05cf9d57af Initial low-level changes to section 4
svn:r696
2003-10-30 23:05:40 +00:00
Roger Dingledine 074a69f89c tweak tweak
svn:r695
2003-10-30 12:10:24 +00:00
Paul Syverson 1d0089dac1 Small changes in design goals. Starting analysis section.
svn:r694
2003-10-30 11:40:14 +00:00
Nick Mathewson f42a4f407e Commit rest of changes to section 3. I am falling asleep, and my section 4 edits are not yet grammatical
svn:r693
2003-10-30 05:24:38 +00:00
Roger Dingledine 164f11b1fa more minor changes/additions
svn:r692
2003-10-30 04:05:28 +00:00
Peter Palfrader b0c202f62c Fix minor typos and add a cite for Privoxy
svn:r691
2003-10-30 02:21:51 +00:00
Nick Mathewson 8c5b2ba882 Edit section 2, compress section 3.
I still need to turn the list of attacks into a paragraph or two
before I move from 3 onto 4.


svn:r690
2003-10-30 00:24:53 +00:00
Paul Syverson 03324271d6 UPdated hostile user assumptions. Other little things.
svn:r689
2003-10-29 11:31:52 +00:00
Roger Dingledine 1ca0fef50f more work
svn:r688
2003-10-28 21:55:38 +00:00
Paul Syverson 0f8cce678e A few changes to related work before heading back to CCS.
svn:r687
2003-10-28 11:29:46 +00:00
Paul Syverson 40901eb1d3 A few tiny tweaks.
svn:r686
2003-10-27 12:05:35 +00:00
Roger Dingledine 271bcb59d3 patch the README more for new routers
svn:r685
2003-10-27 10:28:26 +00:00
Roger Dingledine 57cbc35d70 bugfix for win32 with lots of users
plus general cleanup on switch_id()


svn:r684
2003-10-27 10:26:44 +00:00
Roger Dingledine 202814adf6 add a few more new TODO items (bugfixes)
svn:r683
2003-10-27 10:24:27 +00:00
Roger Dingledine 8b7a2e86db circuits, streams, and tagging, o my!
svn:r682
2003-10-27 10:18:20 +00:00
Roger Dingledine 84c8ceea10 remove obsolete config file
svn:r681
2003-10-27 10:09:09 +00:00
Roger Dingledine 8de95c5bd1 tweaks outside sec4 (couldn't help myself)
svn:r680
2003-10-26 23:49:01 +00:00
Nick Mathewson d52d9352d6 Revise section 1, remove very throughout.
svn:r679
2003-10-26 22:59:18 +00:00
Nick Mathewson 6399c0281d Add note about DNS distinguishability attack
svn:r678
2003-10-26 22:58:04 +00:00
Roger Dingledine da2bfe149b more circuit design section work
svn:r677
2003-10-26 22:49:07 +00:00
Nick Mathewson 0f481ebc5e Commit notes from Friday mtg with arma.
svn:r676
2003-10-26 16:25:06 +00:00
Roger Dingledine 2fd6aae71a crank more on design section
svn:r675
2003-10-26 10:47:49 +00:00
Roger Dingledine bd99fba90c add DirBindAddress, parse the BindAddress's when you bind
exit if bind fails
add usage printfs
rearrange config options for readability


svn:r674
2003-10-25 12:01:09 +00:00
Roger Dingledine bbcf33a1b4 think more about the design section
svn:r673
2003-10-25 11:41:26 +00:00
Nick Mathewson 58a8a9dbd8 Initial changes to intro.
svn:r672
2003-10-24 22:48:26 +00:00
Nick Mathewson b6f8002839 Numerous notes of stuff to do from mtg with Roger; add outline for design section.
svn:r671
2003-10-24 21:18:38 +00:00
Nick Mathewson 48824fb78c Note TODO items; add DROP relay cells
svn:r670
2003-10-24 21:16:43 +00:00
Roger Dingledine aa8a0dd707 some scribblings on exit policies
somebody please go turn this into a section


svn:r669
2003-10-24 11:21:19 +00:00
Roger Dingledine a8db133857 and dirservers are better for non-clique situations
svn:r668
2003-10-24 04:09:10 +00:00
Roger Dingledine c0816d7947 directories are signed so they can be cached elsewhere
svn:r667
2003-10-24 03:39:14 +00:00
Roger Dingledine 85931bcaa1 figured out how to make autoconf a bit less viral
(thanks cherub)


svn:r666
2003-10-24 03:27:53 +00:00
Nick Mathewson c9cbd9d2f9 Use daemon(3) function where available.
svn:r665
2003-10-23 14:28:44 +00:00
Nick Mathewson e12576f0ce resolve warning
svn:r664
2003-10-23 14:27:53 +00:00
Nick Mathewson 1cdf143984 Two-pronged attack at my overzealous skew fixes.
The problem was that the fixes had us generating TLS certs with a
2-day lifetime on the assumption that we'd rotate fairly often.  In
fact, we never rotate our TLS keys.

This patch fixes the situation in 2 ways:
   1. It bumps the default lifetime back up to one year until we get
      rotation in place.
   2. It changes tor_tls_context_new() so that it doesn't leak memory
      when you call it more than once.


svn:r663
2003-10-23 14:20:51 +00:00
Roger Dingledine 1e5963e95a add the dirservers section
svn:r662
2003-10-23 11:45:51 +00:00
Paul Syverson c0a47ce885 Router twins described in intro. Some more stuff in assumptions section.
svn:r661
2003-10-22 22:40:30 +00:00
Paul Syverson 4f3b9fd9cf Added censorship resistant refs. Answered Roger's key question with
more questions.


svn:r660
2003-10-22 18:58:44 +00:00
Steven Hazel f9ec760bc4 switch_id() no longer tries to log the user name when it's calld on
Windows, since we don't know whether it's the user or the group that
was set.


svn:r659
2003-10-22 17:25:58 +00:00
Nick Mathewson 7b8c5d3436 Clock skew fixes.
Allow some slop (currently 3 minutes) when checking certificate validity.

Change certificate lifetime from 1 year to 2 days.  Since we
regenerate regularly (we regenerate regularly, right??), this
shouldn't be a problem.

Have directories reject descriptors published too far in the future
(currently 30 minutes).  If dirservs don't do this:
    0) Today is January 1, 2000.
    1) A very skewed server publishes descriptor X with a declared
       publication time of August 1, 2000.
    2) The directory includes X.
    3) Because of certificate lifetime issues, nobody can use the
       skewed server.
    4) The server fixes its skew, and goes to republish a new descriptor Y
       with publication time of January 1, 2000.
    5) But because the directory already has a "more recent" descriptor X,
       it rejects descriptor "Y" as superseded!

This patch should make step 2 go away.


svn:r658
2003-10-22 16:41:35 +00:00