dev notes: Draft IPT algorithm: Possible fixed descriptor lifetimes
Prompted by https://gitlab.torproject.org/tpo/core/arti/-/merge_requests/1429#note_2924501
This commit is contained in:
parent
36cf899dd9
commit
98e3d7ac56
|
@ -209,6 +209,8 @@ is the minimum (30 minutes).
|
||||||
Otherwise, we double the lifetime each time,
|
Otherwise, we double the lifetime each time,
|
||||||
unless any IPT in the previous descriptor was declared `Faulty`,
|
unless any IPT in the previous descriptor was declared `Faulty`,
|
||||||
in which case we reset it back to the minimum.
|
in which case we reset it back to the minimum.
|
||||||
|
TODO: Perhaps we should just pick fixed short and long lifetimes instead,
|
||||||
|
to limit distinguishability.
|
||||||
|
|
||||||
(Rationale: if IPTs are regularly misbehaving,
|
(Rationale: if IPTs are regularly misbehaving,
|
||||||
we should be cautious and limit our exposure to the damage.)
|
we should be cautious and limit our exposure to the damage.)
|
||||||
|
|
Loading…
Reference in New Issue