Re: [T(A)ILS-dev] Remove the HTP user firewall exception?

Supprimer ce message

Répondre à ce message
Auteur: anonym
Date:  
À: The T(A)ILS public development discussion list
Sujet: Re: [T(A)ILS-dev] Remove the HTP user firewall exception?
30/12/10 14:53, intrigeri:
> Hi,
>
> a new time synchronization implementation idea, mostly inspired by
> Liberte Linux' one, can be found in our todo list:
>
> https://amnesia.boum.org/todo/remove_the_htp_user_firewall_exception/
>
> Reviews / opinions / comments are welcome.


What this does is essentially remove the consensus time validation,
which I'm sure is there for a reason. I'd guess it's there only for
practical purposes, but I think we better ask the Tor devs if it could
enable some kind of strange attack or introduce other problems. It's
better to be safe than sorry.

Cheers!