From 3e4379c2e73bf458cf60c63df44a8d0ec761568c Mon Sep 17 00:00:00 2001 From: Roger Dingledine Date: Fri, 7 Aug 2009 19:26:41 -0400 Subject: Disable .exit notation unless AllowDotExit is 1. --- doc/tor.1.in | 7 +++++++ 1 file changed, 7 insertions(+) (limited to 'doc') diff --git a/doc/tor.1.in b/doc/tor.1.in index b6e22310f..fa383ccba 100644 --- a/doc/tor.1.in +++ b/doc/tor.1.in @@ -690,6 +690,13 @@ resolved. This helps trap accidental attempts to resolve URLs and so on. (Default: 0) .LP .TP +\fBAllowDotOnion \fR\fB0\fR|\fB1\fR\fP +If enabled, we convert "www.google.com.foo.exit" addresses on the +SocksPort/TransPort/NatdPort into "www.google.com" addresses that exit +from the node "foo". Disabled by default since attacking websites and +exit relays can use it to manipulate your path selection. (Default: 0) +.LP +.TP \fBFastFirstHopPK \fR\fB0\fR|\fB1\fR\fP When this option is disabled, Tor uses the public key step for the first hop of creating circuits. Skipping it is generally safe since we have -- cgit v1.2.3 From 07d95440ef3430f74dfe0fa68f7d84eec9a17f3e Mon Sep 17 00:00:00 2001 From: Roger Dingledine Date: Fri, 7 Aug 2009 19:29:19 -0400 Subject: oops, fix typo --- doc/tor.1.in | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'doc') diff --git a/doc/tor.1.in b/doc/tor.1.in index fa383ccba..19f34f93f 100644 --- a/doc/tor.1.in +++ b/doc/tor.1.in @@ -690,7 +690,7 @@ resolved. This helps trap accidental attempts to resolve URLs and so on. (Default: 0) .LP .TP -\fBAllowDotOnion \fR\fB0\fR|\fB1\fR\fP +\fBAllowDotExit \fR\fB0\fR|\fB1\fR\fP If enabled, we convert "www.google.com.foo.exit" addresses on the SocksPort/TransPort/NatdPort into "www.google.com" addresses that exit from the node "foo". Disabled by default since attacking websites and -- cgit v1.2.3