Tor clients and authorities do not check bad_exit flag w/ consensus weights
It looks like neither clients nor the directory authorities are properly handling the BadExit flag when computing and using the Wxx consensus weights.
On the client side, this causes BadExits to be used less than if they were never exits in the first place.
On the consensus side, this causes us to think there is more Exit bandwidth available in the network than there actually is, which can cause us to overload actual exits by assigning them higher weights to be used in the guard and middle positions.
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information