dns: Make TTLs fuzzy at exit relays
commit21eac1e8d8a116f2dd8dd0a7d150916646ee9120
authorRasmus Dahlberg <rasmus@mullvad.net>
Wed, 12 Oct 2022 18:29:11 +0000 (12 20:29 +0200)
committerDavid Goulet <dgoulet@torproject.org>
Wed, 9 Nov 2022 20:30:43 +0000 (9 15:30 -0500)
tree783574117b03f82fa0238fcdac4fc0637c02c269
parent0fe2096144104e63d403896844af121c9622a7a8
dns: Make TTLs fuzzy at exit relays

This change mitigates DNS-based website oracles by making the time that
a domain name is cached uncertain (+- 4 minutes of what's measurable).

Resolves TROVE-2021-009.

Fixes #40674
src/core/or/connection_edge.c
src/core/or/connection_edge.h
src/feature/relay/dns.c
src/test/test_dns.c