prop224: Control the number of HSDirs using a consensus parameter
People are worrying that HSDirs can launch traffic confirmation attacks against hidden service clients. This will be harder to do after the shared randomness proposal gets deployed but still not impossible (without some sort of PIR scheme).
Till we get there, Roger suggested we make the number of HSDirs configurable, and control it using a consensus parameter (similar to how we use NumEntryGuards).
This will also be useful after prop#246 gets implemented and we merge HSDirs with IPs.
On the technical side, we might need two consensus parameters. One for the number of replicas, and one for the number of descriptors per replica.
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information