mirror of
https://gitlab.torproject.org/tpo/core/tor.git
synced 2025-02-22 06:21:55 +01:00
sort TODO items in tier 1 and 2 by category. This needs more work.
svn:r3214
This commit is contained in:
parent
9140b32170
commit
ae25115704
1 changed files with 117 additions and 63 deletions
180
doc/TODO
180
doc/TODO
|
@ -12,91 +12,145 @@ ARMA - arma claims
|
||||||
|
|
||||||
For 0.0.9:
|
For 0.0.9:
|
||||||
|
|
||||||
|
o Solve the MSVC nuisance where __FILE__ contains the full path.
|
||||||
|
People are getting confused about why their errors are coming from
|
||||||
|
C:\Documents and Settings\Nick Mathewson\My Documents\src\tor .
|
||||||
N&R. bring tor-spec up to date
|
N&R. bring tor-spec up to date
|
||||||
N&R. make loglevels info,debug less noisy
|
N&R. make loglevels info,debug less noisy
|
||||||
|
N . OS X package (and bundle?)
|
||||||
|
N . Working RPMs
|
||||||
N - Get win32 servers working, or find out why it isn't happening now.
|
N - Get win32 servers working, or find out why it isn't happening now.
|
||||||
|
|
||||||
************************ For Post 0.0.9 *****************************
|
************************ For Post 0.0.9 *****************************
|
||||||
|
|
||||||
Tier one:
|
Tier one:
|
||||||
- niels's "did it fail because conn refused or timeout or what"
|
o Move to our new version system.
|
||||||
relay end feature.
|
- Changes for forward compatibility
|
||||||
- if a version is later than the last in its series, but a version
|
- If a version is later than the last in its series, but a version
|
||||||
in the next series is recommended, that doesn't mean it's bad.
|
in the next series is recommended, that doesn't mean it's bad.
|
||||||
- fix dfc/weasel's intro point bug
|
|
||||||
- support hostnames as well as IPs for authdirservers.
|
- Bugfixes
|
||||||
N - OS X package (and bundle?)
|
- fix dfc/weasel's intro point bug
|
||||||
N - Make millisecond accuracy work on win32
|
- when we haven't explicitly sent a socks reject, sending one in
|
||||||
- Make more configuration variables into CSVs.
|
connection_about_to_close_connection() fails because we never give it
|
||||||
- Once we have a trusted directory on port 80, stop falling back to
|
a chance to flush. right answer is to do the socks reply manually in
|
||||||
forbidden ports when fascistfirewall blocks all good dirservers.
|
each appropriate case, and then about-to-close-connection can simply
|
||||||
- Convert man pages to pod, or whatever's right.
|
warn us if we forgot one.
|
||||||
- Move to our new version system.
|
|
||||||
- Get more nodes running on 80 and 443.
|
- Documentation
|
||||||
- Get epic, aclu, etc running nodes.
|
- Convert man pages to pod, or whatever's right. Alternatively, find
|
||||||
- Start distributing an rpm with the new version scheme.
|
a man2html that actually works.
|
||||||
- Bug tracker.
|
- Macintosh HOWTO page.
|
||||||
- cache .foo.exit names better, or differently, or not.
|
|
||||||
- teach connection_ap_handshake_socks_reply() about ipv6 and friends
|
- Evangelism
|
||||||
so connection_ap_handshake_socks_resolved() doesn't also need
|
- Get more nodes running on 80 and 443.
|
||||||
to know about them.
|
- Get epic, aclu, etc running nodes.
|
||||||
- when we haven't explicitly sent a socks reject, sending one in
|
|
||||||
connection_about_to_close_connection() fails because we never give
|
- Dirservers and server descs: small, backward-compatible changes
|
||||||
it a chance to flush. right answer is to do the socks reply manually
|
- support hostnames as well as IPs for authdirservers.
|
||||||
in each appropriate case, and then about-to-close-connection can
|
- If we have a trusted directory on port 80, stop falling back to
|
||||||
simply warn us if we forgot one.
|
forbidden ports when fascistfirewall blocks all good dirservers.
|
||||||
- Solve the MSVC nuisance where __FILE__ contains the full path.
|
- GPSLocation optional config string.
|
||||||
People are getting confused about why their errors are coming from
|
|
||||||
C:\Documents and Settings\Nick Mathewson\My Documents\src\tor .
|
- SOCKS enhancements
|
||||||
- GPSLocation optional config string.
|
- niels's "did it fail because conn refused or timeout or what"
|
||||||
- Figure out how to make the rpm not strip the binaries it makes.
|
relay end feature.
|
||||||
|
|
||||||
|
- Windows
|
||||||
|
N - Make millisecond accuracy work on win32
|
||||||
|
- Switch to WSA*Event code as a better poll replacement. Or maybe just
|
||||||
|
do libevent?
|
||||||
|
|
||||||
|
- Code cleanup
|
||||||
|
- Make more configuration variables into CSVs.
|
||||||
|
|
||||||
|
- Support
|
||||||
|
- Bug tracker.
|
||||||
|
|
||||||
|
- Exit hostname support
|
||||||
|
- cache .foo.exit names better, or differently, or not.
|
||||||
|
|
||||||
|
- IPv6 support
|
||||||
|
- teach connection_ap_handshake_socks_reply() about ipv6 and friends
|
||||||
|
so connection_ap_handshake_socks_resolved() doesn't also need
|
||||||
|
to know about them.
|
||||||
|
|
||||||
|
- Packaging
|
||||||
|
- Figure out how to make the rpm not strip the binaries it makes.
|
||||||
|
|
||||||
|
|
||||||
Tier two:
|
Tier two:
|
||||||
|
|
||||||
- Handle pools of waiting circuits better.
|
- Efficiency/speed improvements.
|
||||||
- Limit number of circuits that we preemptively generate based on past
|
- Handle pools of waiting circuits better.
|
||||||
behavior; use same limits in circuit_expire_old_circuits().
|
- Limit number of circuits that we preemptively generate based on past
|
||||||
- Let more config options (e.g. ORPort) change dynamically.
|
behavior; use same limits in circuit_expire_old_circuits().
|
||||||
- Write limiting; configurable token buckets.
|
- Write limiting; configurable token buckets.
|
||||||
- Only the top of a directory needs to be signed.
|
- Switch to libevent? Evaluate it first.
|
||||||
- Make sure logged information is 'safe'.
|
- Make it harder to circumvent bandwidth caps: look at number of bytes
|
||||||
- make advertised_server_mode() ORs fetch dirs more often.
|
sent across sockets, not number sent inside TLS stream.
|
||||||
|
|
||||||
|
|
||||||
|
- QOI
|
||||||
|
- Let more config options (e.g. ORPort) change dynamically.
|
||||||
|
|
||||||
|
- Dirservers and server descs: small, backward-compatible changes
|
||||||
|
- make advertised_server_mode() ORs fetch dirs more often.
|
||||||
|
- Implement If-Modified-Since for directories.
|
||||||
|
|
||||||
|
- Big, incompatible re-architecting and decentralization of directory
|
||||||
|
system.
|
||||||
|
- Only the top of a directory needs to be signed.
|
||||||
|
|
||||||
|
- Windows
|
||||||
|
N - Clean up NT service code; make it work
|
||||||
|
- Get a controller to launch tor and keep it on the system tray.
|
||||||
|
- Win32 installer plus privoxy, sockscap/freecap, etc.
|
||||||
|
|
||||||
|
- Controller enhancements.
|
||||||
|
- controller should have 'getinfo' command to query about rephist,
|
||||||
|
about rendezvous status, etc.
|
||||||
|
|
||||||
N - Clean up NT service code
|
|
||||||
- Work as an NT service; on system tray; etc.
|
|
||||||
- Win32 installer plus privoxy, sockscap/freecap, etc.
|
|
||||||
- controller should have 'getinfo' command to query about rephist,
|
|
||||||
about rendezvous status, etc.
|
|
||||||
- Implement If-Modified-Since for directories.
|
|
||||||
N - Handle rendezvousing with unverified nodes.
|
N - Handle rendezvousing with unverified nodes.
|
||||||
- Specify: Stick rendezvous point's key in INTRODUCE cell.
|
- Specify: Stick rendezvous point's key in INTRODUCE cell.
|
||||||
Bob should _always_ use key from INTRODUCE cell.
|
Bob should _always_ use key from INTRODUCE cell.
|
||||||
- Implement.
|
- Implement.
|
||||||
N - add ipv6 support.
|
|
||||||
|
N - IPv6 support (For exit addresses)
|
||||||
- Spec issue: if a resolve returns an IP4 and an IP6 address,
|
- Spec issue: if a resolve returns an IP4 and an IP6 address,
|
||||||
which to use?
|
which to use?
|
||||||
- christian grothoff's attack of infinite-length circuit.
|
- Add to exit policy code
|
||||||
the solution is to have a separate 'extend-data' cell type
|
- Make tor_gethostbyname into tor_getaddrinfo
|
||||||
which is used for the first N data cells, and only
|
- Make everything that uses uint32_t as an IP address change to use
|
||||||
extend-data cells can be extend requests.
|
a generalize address struct.
|
||||||
. rename/rearrange functions for what file they're in
|
- Change relay cell types to accept new addresses.
|
||||||
|
- Add flag to serverdescs to tell whether IPv6 is supported.
|
||||||
|
- When should servers
|
||||||
|
|
||||||
|
- Security fixes
|
||||||
|
- christian grothoff's attack of infinite-length circuit.
|
||||||
|
the solution is to have a separate 'extend-data' cell type
|
||||||
|
which is used for the first N data cells, and only
|
||||||
|
extend-data cells can be extend requests.
|
||||||
|
- Make sure logged information is 'safe'.
|
||||||
|
|
||||||
|
- Code cleanup
|
||||||
|
. rename/rearrange functions for what file they're in
|
||||||
|
- fix router_get_by_* functions so they can get ourselves too,
|
||||||
|
and audit everything to make sure rend and intro points are
|
||||||
|
just as likely to be us as not.
|
||||||
|
|
||||||
|
- Bugfixes
|
||||||
|
- hidserv offerers shouldn't need to define a SocksPort
|
||||||
|
* figure out what breaks for this, and do it.
|
||||||
|
- should retry exitpolicy end streams even if the end cell didn't
|
||||||
|
resolve the address for you
|
||||||
|
|
||||||
- tor should be able to have a pool of outgoing IP addresses
|
- tor should be able to have a pool of outgoing IP addresses
|
||||||
that it is able to rotate through. (maybe)
|
that it is able to rotate through. (maybe)
|
||||||
- hidserv offerers shouldn't need to define a SocksPort
|
|
||||||
* figure out what breaks for this, and do it.
|
|
||||||
- should retry exitpolicy end streams even if the end cell didn't
|
|
||||||
resolve the address for you
|
|
||||||
- Make it harder to circumvent bandwidth caps: look at number of bytes
|
|
||||||
sent across sockets, not number sent inside TLS stream.
|
|
||||||
- fix router_get_by_* functions so they can get ourselves too,
|
|
||||||
and audit everything to make sure rend and intro points are
|
|
||||||
just as likely to be us as not.
|
|
||||||
|
|
||||||
Packaging, docs, etc:
|
Packaging, docs, etc:
|
||||||
- Exit node caching: tie into squid or other caching web proxy.
|
- Exit node caching: tie into squid or other caching web proxy.
|
||||||
- FAQ.
|
|
||||||
- Website spiffying. Logo. Pictures.
|
|
||||||
- Configuration walk-through with screenshots of each step.
|
|
||||||
|
|
||||||
Deferred until needed:
|
Deferred until needed:
|
||||||
- Do something to prevent spurious EXTEND cells from making middleman
|
- Do something to prevent spurious EXTEND cells from making middleman
|
||||||
|
|
Loading…
Add table
Reference in a new issue