summaryrefslogtreecommitdiff
path: root/changes
diff options
context:
space:
mode:
authorNick Mathewson <nickm@torproject.org>2020-08-03 11:25:37 -0400
committerNick Mathewson <nickm@torproject.org>2020-08-03 11:25:37 -0400
commit435f31aed34e9b58d1e8d9f460e6d2e3c6714fbc (patch)
treebc0d12229d6f5928a43c5e9d8da67148ae571727 /changes
parentc4742b89b23d58958ee0d5ca324dac5948c94bf6 (diff)
downloadtor-435f31aed34e9b58d1e8d9f460e6d2e3c6714fbc.tar.gz
tor-435f31aed34e9b58d1e8d9f460e6d2e3c6714fbc.zip
Remove channel_is_canonical_is_reliable()
This function once served to let circuits continue to be built over version-1 link connections. But such connections are long-obsolete, and it's time to remove this check. Closes #40081.
Diffstat (limited to 'changes')
-rw-r--r--changes/ticket400816
1 files changed, 6 insertions, 0 deletions
diff --git a/changes/ticket40081 b/changes/ticket40081
new file mode 100644
index 0000000000..683ae33518
--- /dev/null
+++ b/changes/ticket40081
@@ -0,0 +1,6 @@
+ o Minor features (security):
+ - Channels using obsolete versions of the Tor link protocol are no
+ longer allowed to circumvent address-canonicity checks.
+ (This is only a minor issue, since such channels have no way to
+ set ed25519 keys, and therefore should always be rejected.)
+ Closes ticket 40081.