OBSOLETE OLD TOR CRYPTO AND ONLY RESOLVE OLD .ONION ADDRESSES
I think it would be best to completely obsolete all the old crypto within TOR, but if it is possible to only use it to resolve old .onion addresses and NOT to build new circuits EVER.
This would essentially be a firewall inside Tor to start only building circuits by default using the New Encryption introduced in Tor 0.3.2.9
There has been enough time elapsed for operators to upgrade and this is a serious bug if TOR is building obsolete circuits with obsolete TOR nodes. Thus the Default and Only setting should be to only build circuits using the Newer Encryption standard now that enough relays are already using the newer nodes.
Trac:
Username: Anony
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information