entry guards | Tor Blog

Tor security advisory: "relay early" traffic confirmation attack

This advisory was posted on the tor-announce mailing list.

277 comments

Improving Tor's anonymity by changing guard parameters

There are tensions in the Tor protocol design between the anonymity provided by entry guards and the performance improvements from better load balancing.

67 comments

The lifecycle of a new relay

Many people set up new fast relays and then wonder why their bandwidth is not fully loaded instantly.

49 comments

Research problem: better guard rotation parameters

Tor's entry guard design protects users in a variety of ways.

16 comments

Upcoming Events

November 23, 2018 - November 25, 2018

GNU Health CON (Las Palmas, Spain)

December 01, 2018

CriptoFiesta (São Paulo)

See All Upcoming Events

Recent Updates

New release: Tor 0.3.5.5-alpha

There's a new alpha release available for download. If you build Tor from source, you can download the source code for 0.3.5.5-alpha from the download page on the website. Packages should be available over the coming weeks, with a new alpha Tor Browser release by late next week.

Remember, this is an alpha release: you should only run this if you'd like to find and report more bugs than usual.

Tor 0.3.5.5-alpha includes numerous bugfixes on earlier releases, including several that we hope to backport to older release series in the future.

Changes in version 0.3.5.5-alpha - 2018-11-16

Major bugfixes (OpenSSL, portability):
- Fix our usage of named groups when running as a TLS 1.3 client in OpenSSL 1.1.1. Previously, we only initialized EC groups when running as a relay, which caused clients to fail to negotiate TLS 1.3 with relays. Fixes bug 28245; bugfix on 0.2.9.15 (when TLS 1.3 support was added).
Minor features (geoip):
- Update geoip and geoip6 to the November 6 2018 Maxmind GeoLite2 Country database. Closes ticket 28395.

Strength in Numbers: An Onion Blooms

Strength in Numbers: Growing Our Board of Directors

This is a series of blogs to complement our 2018 crowdfunding campaign, Strength in Numbers.

New release: Tor 0.3.5.4-alpha

There's a new alpha release available for download. If you build Tor from source, you can download the source code for 0.3.5.4-alpha from the usual place on the website. Packages should be available over the coming weeks, with a new alpha Tor Browser release by mid-December.

Remember, this is an alpha release: you should only run this if you'd like to find and report more bugs than usual.

Tor 0.3.5.4-alpha includes numerous bugfixes on earlier versions and improves our continuous integration support. It continues our attempts to stabilize this alpha branch and build it into a foundation for an acceptable long-term-support release.

Changes in version 0.3.5.4-alpha - 2018-11-08

Major bugfixes (compilation, rust):
- Rust tests can now build and run successfully with the --enable-fragile-hardening option enabled. Doing this currently requires the rust beta channel; it will be possible with stable rust once Rust version 1.31 is released. Patch from Alex Crichton. Fixes bugs 27272, 27273, and 27274. Bugfix on 0.3.1.1-alpha.
Major bugfixes (embedding, main loop):
- When DisableNetwork becomes set, actually disable periodic events that are already enabled. (Previously, we would refrain from enabling new ones, but we would leave the old ones turned on.) Fixes bug 28348; bugfix on 0.3.4.1-alpha.