diff options
author | Nick Mathewson <nickm@torproject.org> | 2006-06-03 21:41:14 +0000 |
---|---|---|
committer | Nick Mathewson <nickm@torproject.org> | 2006-06-03 21:41:14 +0000 |
commit | c660a0f6a2875a8b9b612f28a7f752b3ca8eb5da (patch) | |
tree | 019d62051717340d6b63af87f512120f2f154b85 /doc | |
parent | 85a25c8a29e6d612ff33b75464363a51eea42e7b (diff) | |
download | tor-c660a0f6a2875a8b9b612f28a7f752b3ca8eb5da.tar tor-c660a0f6a2875a8b9b612f28a7f752b3ca8eb5da.tar.gz |
More DNS fixes. Send meaningful TTLs back to the client when
possible. Cache at the server side independently from the TTL, to
prevent attackers from probing the server to see who has been asking
for what hostnames. (Hi, Dan Kaminski!)
Also, clean some whitespace.
svn:r6526
Diffstat (limited to 'doc')
-rw-r--r-- | doc/tor-spec.txt | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/doc/tor-spec.txt b/doc/tor-spec.txt index 347397ce6..6a740bce7 100644 --- a/doc/tor-spec.txt +++ b/doc/tor-spec.txt @@ -571,7 +571,12 @@ when do we rotate which keys (tls, link, etc)? The IPv6 address to which the connection was made [16 octets] A number of seconds (TTL) for which the address may be cached [4 octets] [XXXX Versions of Tor before 0.1.1.6 ignore and do not generate the TTL - field. No version of Tor currently generates the IPv6 format.] + field. No version of Tor currently generates the IPv6 format. + + Tor servers before 0.1.2.0 set the TTL field to a fixed value. Later + versions set the TTL to the last value seen from a DNS server, and expire + their own cached entries after a fixed interval. This prevents certain + attacks.] The OP waits for a RELAY_CONNECTED cell before sending any data. Once a connection has been established, the OP and exit node |