From e716c92127f0da2fc5758c091a9e33857cd5e5d5 Mon Sep 17 00:00:00 2001 From: Mike Perry Date: Tue, 8 May 2018 16:35:20 +0000 Subject: Bug 25870: Mention path restriction differences in manpage. --- doc/tor.1.txt | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/doc/tor.1.txt b/doc/tor.1.txt index 05a612d6a2..2f74d567e5 100644 --- a/doc/tor.1.txt +++ b/doc/tor.1.txt @@ -1573,6 +1573,14 @@ The following options are useful only for clients (that is, if ExcludeNodes have higher priority than HSLayer2Nodes, which means that nodes specified in ExcludeNodes will not be picked. + + + When either this option or HSLayer3Nodes are set, the /16 subnet + and node family restrictions are removed for hidden service + circuits. Additionally, we allow the guard node to be present + as the Rend, HSDir, and IP node, and as the hop before it. This + is done to prevent the adversary from inferring information + about our guard, layer2, and layer3 node choices at later points + in the path. + This option is meant to be managed by a Tor controller such as https://github.com/mikeperry-tor/vanguards that selects and @@ -1619,6 +1627,14 @@ The following options are useful only for clients (that is, if ExcludeNodes have higher priority than HSLayer3Nodes, which means that nodes specified in ExcludeNodes will not be picked. + + + When either this option or HSLayer2Nodes are set, the /16 subnet + and node family restrictions are removed for hidden service + circuits. Additionally, we allow the guard node to be present + as the Rend, HSDir, and IP node, and as the hop before it. This + is done to prevent the adversary from inferring information + about our guard, layer2, and layer3 node choices at later points + in the path. + This option is meant to be managed by a Tor controller such as https://github.com/mikeperry-tor/vanguards that selects and -- cgit v1.2.3-54-g00ecf