blob: 27bad6aafeed2b8ef30fac7b4bd69363900c6b21 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
|
<a id="path-spec.txt-2.5"></a>
# Handling failure
If an attempt to extend a circuit fails (either because the first create
failed or a subsequent extend failed) then the circuit is torn down and is
no longer pending. (XXXX really?) Requests that might have been
supported by the pending circuit thus become unsupported, and a new
circuit needs to be constructed.
If a stream "begin" attempt fails with an EXITPOLICY error, we
decide that the exit node's exit policy is not correctly advertised,
so we treat the exit node as if it were a non-exit until we retrieve
a fresh descriptor for it.
Excessive amounts of either type of failure can indicate an
attack on anonymity. See section 7 for how excessive failure is handled.
|