Browse Source

Add manpage documentation for ServerDNSRandomizeCase.

svn:r17654
Nick Mathewson 17 years ago
parent
commit
d58de02778
1 changed files with 11 additions and 0 deletions
  1. 11 0
      doc/tor.1.in

+ 11 - 0
doc/tor.1.in

@@ -1027,6 +1027,17 @@ client addresses have contacted it so that it can help the bridge
 authority guess which countries have blocked access to it.
 authority guess which countries have blocked access to it.
 .LP
 .LP
 .TP
 .TP
+\fBServerDNSRandomizeCase \fR\fB0\fR|\fB1\fR\fP
+When this option is set, Tor sets the case of each character randomly in
+outgoing DNS requests, and makes sure that the case matches in DNS replies.
+This so-called "0x20 hack" helps resist some types of DNS poisoning attack.
+For more information, see "Increased DNS Forgery Resistance through 0x20-Bit
+Encoding".
+This option only affects name lookups that your server does on
+behalf of clients.
+(Default: 1)
+.LP
+.TP
 \fBGeoIPFile \fR\fIfilename\fP
 \fBGeoIPFile \fR\fIfilename\fP
 A filename containing GeoIP data, for use with BridgeRecordUsageByCountry.
 A filename containing GeoIP data, for use with BridgeRecordUsageByCountry.