Browse Source

Clarify that rend cookies shouldn't be reused

Sebastian Hahn 15 years ago
parent
commit
8557f64220
1 changed files with 2 additions and 1 deletions
  1. 2 1
      doc/spec/rend-spec.txt

+ 2 - 1
doc/spec/rend-spec.txt

@@ -591,7 +591,8 @@
         RC   Rendezvous cookie    [20 octets]
         RC   Rendezvous cookie    [20 octets]
 
 
    The rendezvous cookie is an arbitrary 20-byte value, chosen randomly by
    The rendezvous cookie is an arbitrary 20-byte value, chosen randomly by
-   Alice's OP.
+   Alice's OP. Alice SHOULD choose a new rendezvous cookie for each new
+   connection attempt.
 
 
    Upon receiving a RELAY_COMMAND_ESTABLISH_RENDEZVOUS cell, the OR associates
    Upon receiving a RELAY_COMMAND_ESTABLISH_RENDEZVOUS cell, the OR associates
    the RC with the circuit that sent it.  It replies to Alice with an empty
    the RC with the circuit that sent it.  It replies to Alice with an empty