Re: [tor-dev] Proposal 273: Exit relay pinning for web services

2016-10-15 Thread teor
> On 7 Oct 2016, at 00:22, s7r wrote: > > I don't care about location anonymity because my > website is clearnet public anyway and I want my website to handle many > Tor users, just setup a bridge Tor instance on localhost (127.0.0.1) not > published to the bridge authority, point the second Tor

Re: [tor-dev] Proposal 273: Exit relay pinning for web services

2016-10-15 Thread Roger Dingledine
On Sat, Oct 15, 2016 at 07:02:19PM -0400, Aaron Johnson wrote: > A concern with this proposal that I have not seen mentioned is that exit >pinning would cause the Tor path itself to leak more information about >the intended destination. For example, a destination could (possibly >without malicious

Re: [tor-dev] Proposal 273: Exit relay pinning for web services

2016-10-15 Thread Aaron Johnson
A concern with this proposal that I have not seen mentioned is that exit pinning would cause the Tor path itself to leak more information about the intended destination. For example, a destination could (possibly without malicious intent) pin a single exit that is otherwise unlikely to be used.