dev notes: Draft IPT algorithm: Possible fixed descriptor lifetimes

Prompted by https://gitlab.torproject.org/tpo/core/arti/-/merge_requests/1429#note_2924501
2023-07-25 15:28:12 +01:00 · 2023-07-25 15:28:12 +01:00 · 98e3d7ac56
parent 36cf899dd9
commit 98e3d7ac56
1 changed files with 2 additions and 0 deletions
--- a/doc/dev/notes/hssvc-ipt-algorithms.md
+++ b/doc/dev/notes/hssvc-ipt-algorithms.md
@ -209,6 +209,8 @@ is the minimum (30 minutes).
 Otherwise, we double the lifetime each time,
 unless any IPT in the previous descriptor was declared `Faulty`,
 in which case we reset it back to the minimum.
+TODO: Perhaps we should just pick fixed short and long lifetimes instead,
+to limit distinguishability.

 (Rationale: if IPTs are regularly misbehaving,
 we should be cautious and limit our exposure to the damage.)