Re: [tor-dev] [draft] Proposal 220: Migrate server identity keys to Ed25519

2013-08-13 Thread Nick Mathewson
On Tue, Aug 13, 2013 at 4:19 PM, grarpamp wrote: > Thought I'd note seeing some projects xor different > encryption types together, usually for stream encryption, > so as to not rest all on one. That's not to suggest such > ideas might of use within Tor, just something seen when > balancing what t

Re: [tor-dev] [draft] Proposal 220: Migrate server identity keys to Ed25519

2013-08-13 Thread Nick Mathewson
On Tue, Aug 13, 2013 at 4:25 PM, Maxim Kammerer wrote: > On Tue, Aug 13, 2013 at 4:13 AM, Nick Mathewson > wrote: >> >>Ed25519 (specifically, Ed25519-SHA-512 as described and specified at >>http://ed25519.cr.yp.to/) is a desirable choice here: it's secure, >>fast, has small keys and s

Re: [tor-dev] [draft] Proposal 220: Migrate server identity keys to Ed25519

2013-08-13 Thread Nick Mathewson
On Tue, Aug 13, 2013 at 2:54 PM, Sebastian G. wrote: [...] > Did you plan to use a closing bracket or is something missing? Thanks! I've filled in these gaps in the version in the torspec Git repository. (These unfinished sentences are a side-effect of my writing style. I get an idea for the

Re: [tor-dev] Globe without search term

2013-08-13 Thread Christian
On 13.08.2013 09:20, Karsten Loesing wrote: On 8/12/13 10:56 PM, Christian wrote: I've seen that you've included the field parameter to limit the fields that onionoo returns. Do you think it would be better to use the field parameter and show a limited amount of data or try to get everything and

Re: [tor-dev] [draft] Proposal 220: Migrate server identity keys to Ed25519

2013-08-13 Thread Maxim Kammerer
On Tue, Aug 13, 2013 at 4:13 AM, Nick Mathewson wrote: >Ed25519 (specifically, Ed25519-SHA-512 as described and specified at >http://ed25519.cr.yp.to/) is a desirable choice here: it's secure, >fast, has small keys and small signatures, is bulletproof in several >important ways, an

Re: [tor-dev] [draft] Proposal 220: Migrate server identity keys to Ed25519

2013-08-13 Thread grarpamp
Thought I'd note seeing some projects xor different encryption types together, usually for stream encryption, so as to not rest all on one. That's not to suggest such ideas might of use within Tor, just something seen when balancing what to use arises. __

Re: [tor-dev] [draft] Proposal 220: Migrate server identity keys to Ed25519

2013-08-13 Thread Sebastian G.
13.08.2013 Nick Mathewson: > 6. Naming nodes in the interface > >Anywhere in the interface that takes an $identity should be able to >take an ECC identity too. ECC identities are case-sensitive base64 >encodings of Ed25519 identity keys. You can use $ to indicate them as >well; we

Re: [tor-dev] [draft] Proposal 219: Support for full DNS and DNSSEC resolution in Tor

2013-08-13 Thread Bry8 Star
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 After a quick read on it, i'm adding bit more info in below, might or might not be related and might or might not be helpful. DNS packets from Tor-client side toward a DNS-Server, should be encrypted, to keep it non-viewable in exit-node computers,

Re: [tor-dev] [draft] Proposal 220: Migrate server identity keys to Ed25519

2013-08-13 Thread Sebastian G.
13.08.2013, Nick Mathewson: > 2.3.1. Checking descriptor signatures. > >Current versions of Tor will handle these new formats by ignoring the >new fields, and not checking any ed25519 information. > >New version of Tor will have a flag that tells them whether to check >ed25519 inf

Re: [tor-dev] [GSoC 2013] Status report - Searchable metrics archive

2013-08-13 Thread Kostas Jakeliunas
On Tue, Aug 13, 2013 at 2:15 PM, Karsten Loesing wrote: > > I suggest putting pg_prewarm on the future work list. I sense there's a > lot of unused potential in stock PostgreSQL. Tweaking the database at > this point has the word "premature optimization" written on it in big > letters for me. >

Re: [tor-dev] [GSoC 2013] Status report - Searchable metrics archive

2013-08-13 Thread Karsten Loesing
On 8/12/13 2:58 PM, Kostas Jakeliunas wrote: > Karsten, > > this won't be a very short email, but I honestly swear I did revise it a > couple of times. :) Okay. I'm putting in feedback below where I think it makes most sense. > This is not urgent by any measure, so whenever you find > time to r

Re: [tor-dev] Globe without search term

2013-08-13 Thread Karsten Loesing
On 8/12/13 10:56 PM, Christian wrote: > I've seen that you've included the field parameter to limit the fields > that onionoo returns. > Do you think it would be better to use the field parameter and show a > limited amount of data or try to get everything and only display the > fields that have a