Changeset 69

Timestamp:

01/12/06 03:50:56 (3 years ago)

Author:

edmanm

Message:

Note that the example "pinging" method mentioned for circuit latency measurement also
has a security flaw.

Files:

• trunk/doc/design/feature-spec.txt (modified) (1 diff)

trunk/doc/design/feature-spec.txt

@@ -220 +220 @@
 firewall configured, it must accept connections from the exit node of the
 circuit being measured otherwise Vidalia would be unable to connect back to
-itself.
+itself. Also, an adversary who can observe the user would see that a Tor
+exit node is connecting back to the user and sending these "pings", yielding
+the identity of this user's exit node.