From 1e86603b1c3846e447fa3f6c14fccef7221cc26d Mon Sep 17 00:00:00 2001 From: Nick Mathewson Date: Thu, 15 May 2008 06:11:54 +0000 Subject: [PATCH] r15623@tombo: nickm | 2008-05-15 02:10:53 -0400 Notes on authority diversity for authority-policy.txt svn:r14619 --- doc/contrib/authority-policy.txt | 21 ++++++++++++++++++++- 1 file changed, 20 insertions(+), 1 deletion(-) diff --git a/doc/contrib/authority-policy.txt b/doc/contrib/authority-policy.txt index 18317a7022..657ee0ae96 100644 --- a/doc/contrib/authority-policy.txt +++ b/doc/contrib/authority-policy.txt @@ -31,6 +31,8 @@ - Must be available to upgrade within a few days in most cases. (While we're still developing Tor, we periodically find bugs that impact the whole network and require dirserver upgrades.) + - Should be have a well-known way to contact the administrator + via PGP-encrypted message. o Integrity: - Must promise not to censor or attack the network and users. @@ -41,7 +43,23 @@ otherwise, you will fight it to the extent of your abilities. If you fail to fight it, you must shut down the Tor server and notify us that you have. - - Dirservers (and operators) in a variety of jurisdictions are best. + + o Diversity + - We should avoid situations that make it likelier for multiple + dirserver failures to happen at the same time. Therefore... + - It's good when dirservers are not all in the same country. + - It's good when dirservers are not all in the same jurisdictions. + - It's good when dirservers are not all running the same OS. + - It's good when dirservers are not all using the same ISP. + - It's good when dirservers are not all running the same + version of Tor. + - No two dirservers should have the same operator. + - Maximal diversity, however, is not always practical. Sometimes, + for example, there is only one version of Tor that provides a + given consensus generation algorithm. + - A small group of authorities with the same country/jurisdiction/OS is + not a problem, until that group's size approaches quorum (half the + authorities). 2. How to choose the recommended versions @@ -68,3 +86,4 @@ +one" > i try to draw the line at 'good reasons and above' + -- 2.11.4.GIT