aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
* Edit section 2, compress section 3.Nick Mathewson2003-10-30
| | | | | | | | I still need to turn the list of attacks into a paragraph or two before I move from 3 onto 4. svn:r690
* UPdated hostile user assumptions. Other little things.Paul Syverson2003-10-29
| | | | svn:r689
* more workRoger Dingledine2003-10-28
| | | | svn:r688
* A few changes to related work before heading back to CCS.Paul Syverson2003-10-28
| | | | svn:r687
* A few tiny tweaks.Paul Syverson2003-10-27
| | | | svn:r686
* patch the README more for new routersRoger Dingledine2003-10-27
| | | | svn:r685
* bugfix for win32 with lots of usersRoger Dingledine2003-10-27
| | | | | | | plus general cleanup on switch_id() svn:r684
* add a few more new TODO items (bugfixes)Roger Dingledine2003-10-27
| | | | svn:r683
* circuits, streams, and tagging, o my!Roger Dingledine2003-10-27
| | | | svn:r682
* remove obsolete config fileRoger Dingledine2003-10-27
| | | | svn:r681
* tweaks outside sec4 (couldn't help myself)Roger Dingledine2003-10-26
| | | | svn:r680
* Revise section 1, remove very throughout.Nick Mathewson2003-10-26
| | | | svn:r679
* Add note about DNS distinguishability attackNick Mathewson2003-10-26
| | | | svn:r678
* more circuit design section workRoger Dingledine2003-10-26
| | | | svn:r677
* Commit notes from Friday mtg with arma.Nick Mathewson2003-10-26
| | | | svn:r676
* crank more on design sectionRoger Dingledine2003-10-26
| | | | svn:r675
* add DirBindAddress, parse the BindAddress's when you bindRoger Dingledine2003-10-25
| | | | | | | | | exit if bind fails add usage printfs rearrange config options for readability svn:r674
* think more about the design sectionRoger Dingledine2003-10-25
| | | | svn:r673
* Initial changes to intro.Nick Mathewson2003-10-24
| | | | svn:r672
* Numerous notes of stuff to do from mtg with Roger; add outline for design ↵Nick Mathewson2003-10-24
| | | | | | section. svn:r671
* Note TODO items; add DROP relay cellsNick Mathewson2003-10-24
| | | | svn:r670
* some scribblings on exit policiesRoger Dingledine2003-10-24
| | | | | | | somebody please go turn this into a section svn:r669
* and dirservers are better for non-clique situationsRoger Dingledine2003-10-24
| | | | svn:r668
* directories are signed so they can be cached elsewhereRoger Dingledine2003-10-24
| | | | svn:r667
* figured out how to make autoconf a bit less viralRoger Dingledine2003-10-24
| | | | | | | (thanks cherub) svn:r666
* Use daemon(3) function where available.Nick Mathewson2003-10-23
| | | | svn:r665
* resolve warningNick Mathewson2003-10-23
| | | | svn:r664
* Two-pronged attack at my overzealous skew fixes.Nick Mathewson2003-10-23
| | | | | | | | | | | | | | | The problem was that the fixes had us generating TLS certs with a 2-day lifetime on the assumption that we'd rotate fairly often. In fact, we never rotate our TLS keys. This patch fixes the situation in 2 ways: 1. It bumps the default lifetime back up to one year until we get rotation in place. 2. It changes tor_tls_context_new() so that it doesn't leak memory when you call it more than once. svn:r663
* add the dirservers sectionRoger Dingledine2003-10-23
| | | | svn:r662
* Router twins described in intro. Some more stuff in assumptions section.Paul Syverson2003-10-22
| | | | svn:r661
* Added censorship resistant refs. Answered Roger's key question withPaul Syverson2003-10-22
| | | | | | | more questions. svn:r660
* switch_id() no longer tries to log the user name when it's calld onSteven Hazel2003-10-22
| | | | | | | | Windows, since we don't know whether it's the user or the group that was set. svn:r659
* Clock skew fixes.Nick Mathewson2003-10-22
| | | | | | | | | | | | | | | | | | | | | | | | | | Allow some slop (currently 3 minutes) when checking certificate validity. Change certificate lifetime from 1 year to 2 days. Since we regenerate regularly (we regenerate regularly, right??), this shouldn't be a problem. Have directories reject descriptors published too far in the future (currently 30 minutes). If dirservs don't do this: 0) Today is January 1, 2000. 1) A very skewed server publishes descriptor X with a declared publication time of August 1, 2000. 2) The directory includes X. 3) Because of certificate lifetime issues, nobody can use the skewed server. 4) The server fixes its skew, and goes to republish a new descriptor Y with publication time of January 1, 2000. 5) But because the directory already has a "more recent" descriptor X, it rejects descriptor "Y" as superseded! This patch should make step 2 go away. svn:r658
* some minor tweaksRoger Dingledine2003-10-22
| | | | svn:r657
* - fixed a bug in the id switching code -- setgid has to happen beforeSteven Hazel2003-10-22
| | | | | | | | | | | | | | | setuid, because after we setuid we don't have the priviledges we need to setgid anymore, duh. merged switch_user() and switch_group() into switch_id(), since that code has to be wound together. - return -1 from switch_id() if it's not defined to do anything else. - moved daemoinize(), write_pidfile(), and switch_id() from main.c to util.c svn:r656
* play with connection_edge_send_commandRoger Dingledine2003-10-22
| | | | | | | maybe more robust now svn:r655
* move default exit policy into config filesRoger Dingledine2003-10-22
| | | | svn:r654
* make end relay cells have payloadsRoger Dingledine2003-10-22
| | | | | | | move default exit policy into config files svn:r653
* added User and Group options -- if you set them, tor will try toSteven Hazel2003-10-22
| | | | | | | | | | | | | | | setuid and setgid respectively, and die if it can't. (If the User option is set, tor will setgid to the user's gid as well.) This happens after the pidfile is created, so that in cases where tor needs to be root to work with the pidfile, it will at least be able to create it, although it won't be able to delete it. That sucks, but it's somewhat better than not being able to create the pidfile in the first place. svn:r652
* todo now reflects what we need to do.Roger Dingledine2003-10-22
| | | | svn:r651
* force the admin to mkdir the datadirectory himself,Roger Dingledine2003-10-22
| | | | | | | | | | | so he gets the permissions right. also this means clients will never need to make the datadirectory. also remind the admin to fix his clock before setting up his node. svn:r650
* fill in some lncs numbersRoger Dingledine2003-10-21
| | | | svn:r649
* Adversary model mostly done? Some other small changes in assumptions et passim.Paul Syverson2003-10-21
| | | | svn:r648
* Update .cvsignores to exclude files generated due to recent build improvementsNick Mathewson2003-10-21
| | | | svn:r647
* Add design goals sectionNick Mathewson2003-10-21
| | | | svn:r646
* fix error in rendezvous descriptionRoger Dingledine2003-10-21
| | | | svn:r645
* APPort is now SocksPortRoger Dingledine2003-10-21
| | | | svn:r644
* introduce new tor_free() macroRoger Dingledine2003-10-21
| | | | svn:r643
* move closer to being able to reload config on HUPRoger Dingledine2003-10-21
| | | | | | | | rename APPort to SocksPort introduce new tor_free() macro svn:r642
* remove obsolete config fileRoger Dingledine2003-10-21
| | | | svn:r641