Re: [tor-dev] Alternative directory format for v3 client auth

2018-07-11 Thread Michael Rogers
On 11/07/18 14:22, George Kadianakis wrote: > Michael Rogers writes: > >> On 10/07/18 19:58, George Kadianakis wrote: >>> here is a patch with an alternative directory format for v3 client auth >>> crypto key bookkeeping as discussed yesterday on IRC: >>>

Re: [tor-dev] lets make 'working DNS' an exit flag requirement

2018-07-11 Thread nusenu
Nathaniel Suchy: > I'm going to state my support for it here. I'm not a developer however I > agree all exits should provide DNS from a local resolver (Unbound or > similar) to get the exit flag. just to be clear: the proposal would not require any specific DNS configuration it would simply

Re: [tor-dev] lets make 'working DNS' an exit flag requirement

2018-07-11 Thread meejah
nusenu writes: > I'd like to see 'working DNS' as a requirement for the exit flag. > > If there are no major objections and if I'm able to find > someone to implement it I'd like to proceed with writing > a small proposal. > > Would anyone be willing to implement it in tor? This would be a

Re: [tor-dev] lets make 'working DNS' an exit flag requirement

2018-07-11 Thread nusenu
>> Would anyone be willing to implement it in tor? > > This would be a feature for scanners, not little-t-tor itself, right? the test would be performed by tor in the dir auth role (like other tests performed by dir auths) -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu

Re: [tor-dev] The case with Tor2Web

2018-07-11 Thread Giovanni Pellerano
Hello George! no problem exists at all and an thank you so much for letting us know. definitely the safety of Tor has always to come first with no compromises :) take care, Giovanni 2018-07-11 12:06 GMT+02:00 Fabio Pietrosanti : > Hey George, > > not a problem if the Tor2webMode goes away, as

Re: [tor-dev] Alternative directory format for v3 client auth

2018-07-11 Thread George Kadianakis
Michael Rogers writes: > On 10/07/18 19:58, George Kadianakis wrote: >> here is a patch with an alternative directory format for v3 client auth >> crypto key bookkeeping as discussed yesterday on IRC: >>https://github.com/torproject/torspec/pull/23 >> >> Thanks for making me edit the

Re: [tor-dev] Alternative directory format for v3 client auth

2018-07-11 Thread Michael Rogers
On 10/07/18 19:58, George Kadianakis wrote: > here is a patch with an alternative directory format for v3 client auth > crypto key bookkeeping as discussed yesterday on IRC: >https://github.com/torproject/torspec/pull/23 > > Thanks for making me edit the spec because it made me think of

[tor-dev] lets make 'working DNS' an exit flag requirement

2018-07-11 Thread nusenu
I'd like to see 'working DNS' as a requirement for the exit flag. If there are no major objections and if I'm able to find someone to implement it I'd like to proceed with writing a small proposal. Would anyone be willing to implement it in tor?

Re: [tor-dev] lets make 'working DNS' an exit flag requirement

2018-07-11 Thread Nathaniel Suchy
I'm going to state my support for it here. I'm not a developer however I agree all exits should provide DNS from a local resolver (Unbound or similar) to get the exit flag. On Wed, Jul 11, 2018 at 12:38 PM nusenu wrote: > I'd like to see 'working DNS' as a requirement for the exit flag. > > If

Re: [tor-dev] Alternative directory format for v3 client auth

2018-07-11 Thread George Kadianakis
Michael Rogers writes: > On 11/07/18 14:22, George Kadianakis wrote: >> Michael Rogers writes: >> >>> On 10/07/18 19:58, George Kadianakis wrote: here is a patch with an alternative directory format for v3 client auth crypto key bookkeeping as discussed yesterday on IRC:

Re: [tor-dev] lets make 'working DNS' an exit flag requirement

2018-07-11 Thread nusenu
there is a great ticket about solving this problem via self-checks: https://trac.torproject.org/projects/tor/ticket/24014 exits will disable exiting once they realize they fail at doing DNS. I believe it will cover most if not all of current problems, lets check again once this is implemented