Re: [tor-dev] Different trust levels using single client instance

2016-11-04 Thread teor
> On 5 Nov. 2016, at 11:26, Patrick Schleizer > wrote: > > Thank you for your answers! > > teor: >> * Caching of DNS, HS descriptors, preemptive circuits, etc. > > Can you please elaborate on 'etc.'? > > I am asking because stream isolation for DNS already has a ticket: > https://trac.torpr

Re: [tor-dev] Different trust levels using single client instance

2016-11-04 Thread Patrick Schleizer
Thank you for your answers! teor: > * Caching of DNS, HS descriptors, preemptive circuits, etc. Can you please elaborate on 'etc.'? I am asking because stream isolation for DNS already has a ticket: https://trac.torproject.org/projects/tor/ticket/20555 HS cache isolation also has a ticket: htt

[tor-dev] sketch: An alternative prop224 authentication mechanism based on curve25519

2016-11-04 Thread Nick Mathewson
Hi! I thought I'd write this up while it was fresh in my mind. It could be used as an alternative method to the current proposed client authentication mechanism. We could implement both, or just this, or just the other. My description here will be a bit terser than we'd want in a proper proposa

Re: [tor-dev] Revisiting prop224 client authorization

2016-11-04 Thread Nick Mathewson
On Tue, Nov 1, 2016 at 1:32 PM, George Kadianakis wrote: > I worked some more on the descriptor part of client authorization and > prepared a torspec patch. You can find it at `prop224_client_auth_2` in > my repo: > > https://gitweb.torproject.org/user/asn/torspec.git/commit/?h=prop224_client_