diff options
author | David Goulet <dgoulet@torproject.org> | 2023-06-20 09:38:48 -0400 |
---|---|---|
committer | David Goulet <dgoulet@torproject.org> | 2023-06-20 09:38:48 -0400 |
commit | a3fd8ad6f2981684a1729fceae6fc5bd93ed8cf0 (patch) | |
tree | 863ed6ae388b5b85f83dee5857f9e0aca70e30ca /rend-spec-v3.txt | |
parent | e6326aa805d7ffb782d4136c9e5274bc64937274 (diff) | |
parent | aa68b6c62fd57157bf111c96ed45fb8c539e865a (diff) | |
download | torspec-a3fd8ad6f2981684a1729fceae6fc5bd93ed8cf0.tar.gz torspec-a3fd8ad6f2981684a1729fceae6fc5bd93ed8cf0.zip |
Merge branch 'tor-gitlab/mr/138'
Diffstat (limited to 'rend-spec-v3.txt')
-rw-r--r-- | rend-spec-v3.txt | 22 |
1 files changed, 22 insertions, 0 deletions
diff --git a/rend-spec-v3.txt b/rend-spec-v3.txt index e1d6174..383b73a 100644 --- a/rend-spec-v3.txt +++ b/rend-spec-v3.txt @@ -998,6 +998,28 @@ Table of contents: Consider that the service is at 01:00 right after SRV#2: it will upload its second descriptor using TP#2 and SRV#2. +2.2.4.3. Directory behavior for handling descriptor uploads [DIRUPLOAD] + + Upon receiving a hidden service descriptor publish request, directories MUST + check the following: + + * The outer wrapper of the descriptor can be parsed according to + [DESC-OUTER] + * The version-number of the descriptor is "3" + * If the directory has already cached a descriptor for this hidden service, + the revision-counter of the uploaded descriptor must be greater than the + revision-counter of the cached one + * The descriptor signature is valid + + If any of these basic validity checks fails, the directory MUST reject the + descriptor upload. + + NOTE: Even if the descriptor passes the checks above, its first and second + layers could still be invalid: directories cannot validate the encrypted + layers of the descriptor, as they do not have access to the public key of the + service (required for decrypting the first layer of encryption), or the + necessary client credentials (for decrypting the second layer). + 2.2.5. Expiring hidden service descriptors [EXPIRE-DESC] Hidden services set their descriptor's "descriptor-lifetime" field to 180 |