dns: Make TTLs fuzzy at exit relays
commit15efc25fb502474b8a4f2ee8cb03bd5d185a3f47
authorRasmus Dahlberg <rasmus@mullvad.net>
Wed, 12 Oct 2022 18:29:11 +0000 (12 20:29 +0200)
committerDavid Goulet <dgoulet@torproject.org>
Mon, 28 Nov 2022 15:25:06 +0000 (28 10:25 -0500)
tree498d3fe4c1453f406cd88a7dae81e412e610bfc3
parentbe7afe658e5fc6745a369d6fb3fbc4bb6037da18
dns: Make TTLs fuzzy at exit relays

This change mitigates DNS-based website oracles by making the time that
a domain name is cached uncertain (+- 4 minutes of what's measurable).

Resolves TROVE-2021-009.

Fixes #40674
src/core/or/connection_edge.c
src/core/or/connection_edge.h
src/feature/relay/dns.c
src/test/test_dns.c