|
@@ -30,8 +30,8 @@
|
|
o Availability:
|
|
o Availability:
|
|
- Must be available to upgrade within a few days in most cases.
|
|
- Must be available to upgrade within a few days in most cases.
|
|
(While we're still developing Tor, we periodically find bugs that
|
|
(While we're still developing Tor, we periodically find bugs that
|
|
- impact the whole network and require dirserver upgrades.)
|
|
+ impact the whole network and require authority upgrades.)
|
|
- - Should be have a well-known way to contact the administrator
|
|
+ - Should have a well-known way to contact the administrator
|
|
via PGP-encrypted message.
|
|
via PGP-encrypted message.
|
|
|
|
|
|
o Integrity:
|
|
o Integrity:
|
|
@@ -46,14 +46,14 @@
|
|
|
|
|
|
o Diversity
|
|
o Diversity
|
|
- We should avoid situations that make it likelier for multiple
|
|
- We should avoid situations that make it likelier for multiple
|
|
- dirserver failures to happen at the same time. Therefore...
|
|
+ authority failures to happen at the same time. Therefore...
|
|
- - It's good when dirservers are not all in the same country.
|
|
+ - It's good when authorities are not all in the same country.
|
|
- - It's good when dirservers are not all in the same jurisdictions.
|
|
+ - It's good when authorities are not all in the same jurisdictions.
|
|
- - It's good when dirservers are not all running the same OS.
|
|
+ - It's good when authorities are not all running the same OS.
|
|
- - It's good when dirservers are not all using the same ISP.
|
|
+ - It's good when authorities are not all using the same ISP.
|
|
- - It's good when dirservers are not all running the same
|
|
+ - It's good when authorities are not all running the same
|
|
version of Tor.
|
|
version of Tor.
|
|
- - No two dirservers should have the same operator.
|
|
+ - No two authorities should have the same operator.
|
|
- Maximal diversity, however, is not always practical. Sometimes,
|
|
- Maximal diversity, however, is not always practical. Sometimes,
|
|
for example, there is only one version of Tor that provides a
|
|
for example, there is only one version of Tor that provides a
|
|
given consensus generation algorithm.
|
|
given consensus generation algorithm.
|