On 5/8/12, Beck Chen wrote:
> According to the outline, the long-term identity key should be different
> from the
> signing key, which changes every 3-12 months. Then why should the signing
> key
> become the identity key in the descriptor format, and fingerprint become
> the hash
> of the identi
I observed some inconsistency, if not errors, in the directory server specs
[1]:
1. Outline
Every authority has a very-secret, long-term "Authority Identity Key".
This is stored encrypted and/or offline, and is used to sign "key
certificate" documents. Every key certificate contains a me
I think this is useful info. There's also some previous user studies
you've done lying around somewhere else too, yes?
I think it's unlikely for anything to come out of any of it without trac
tickets, though. I've already forgotten where you even posted the
previous user studies.
Thus spake Andr
On 5/7/12 7:49 PM, Beck Chen wrote:
> On Mon, May 7, 2012 at 5:13 PM, Karsten Loesing wrote:
>
>> On 5/6/12 3:36 AM, Damian Johnson wrote:
>>> First I'd like to make sure that I'm clear on what we're trying to do.
>>> The javadocs for VerifyDescriptors [1] says that it...
>>>
Verify server de
On Mon, May 7, 2012 at 5:13 PM, Karsten Loesing wrote:
> On 5/6/12 3:36 AM, Damian Johnson wrote:
> > First I'd like to make sure that I'm clear on what we're trying to do.
> > The javadocs for VerifyDescriptors [1] says that it...
> >
> >> Verify server descriptors using the contained signing key
Nathan Freitas wrote:
> Since the dawn of Orbot, way back in 2009, the onion routing robot app
> has been built using an unwieldy combination of tools, based on an
> extremely out of date method for cross-compiling C code for Android/ARM.
> In the 1.x era of Android, there was no Native Developme
On Fri, May 4, 2012 at 7:52 AM, Gisle Vanem wrote:
> MSVC doesn't have . Hence this little patch is needed:
Applied; thanks!
--
Nick
___
tor-dev mailing list
tor-dev@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev
On 5/6/12 3:36 AM, Damian Johnson wrote:
> First I'd like to make sure that I'm clear on what we're trying to do.
> The javadocs for VerifyDescriptors [1] says that it...
>
>> Verify server descriptors using the contained signing key. Verify that
>> 1) a contained fingerprint is actually a hash o
