Parcourir la source

document aborted attempt to merge client dns cache with server dns cache

svn:r930
Roger Dingledine il y a 22 ans
Parent
commit
f9bdb8a0da
1 fichiers modifiés avec 5 ajouts et 0 suppressions
  1. 5 0
      src/or/connection_edge.c

+ 5 - 0
src/or/connection_edge.c

@@ -838,6 +838,11 @@ int connection_ap_can_use_exit(connection_t *conn, routerinfo_t *exit)
 /* ***** Client DNS code ***** */
 
 /* XXX Perhaps this should get merged with the dns.c code somehow. */
+/* XXX But we can't just merge them, because then nodes that act as
+ *     both OR and OP could be attacked: people could rig the dns cache
+ *     by answering funny things to stream begin requests, and later
+ *     other clients would reuse those funny addr's. Hm.
+ */
 struct client_dns_entry {
   SPLAY_ENTRY(client_dns_entry) node;
   char *address;