From 8a341cc429879e642862cb16a9de5da889867020 Mon Sep 17 00:00:00 2001 From: Nick Mathewson Date: Wed, 6 Jun 2012 12:00:04 -0400 Subject: Change the default for DynamicDHGroups to 0 This feature can make Tor relays less identifiable by their use of the mod_ssl DH group, but at the cost of some usability (#4721) and bridge tracing (#6087) regressions. We should try to turn this on by default again if we find that the mod_ssl group is uncommon and/or we move to a different DH group size (see #6088). Before we can do so, we need a fix for bugs #6087 and Resolves ticket #5598 for now. --- changes/bug5598 | 5 +++++ 1 file changed, 5 insertions(+) create mode 100644 changes/bug5598 (limited to 'changes') diff --git a/changes/bug5598 b/changes/bug5598 new file mode 100644 index 000000000..e8e67415b --- /dev/null +++ b/changes/bug5598 @@ -0,0 +1,5 @@ + o Changed defaults: + - Change the default value for DynamicDHGroups to 0. This feature can + make Tor relays less identifiable by their use of the mod_ssl DH + group, but at the cost of some usability (#4721) and bridge tracing + (#6087) regressions. Resolves ticket #5598. -- cgit v1.2.3