doc/dev/notes/vanguards.md contradicts vanguards spec
According to the vanguards spec, there's a slight asymmetry between lite and full vanguard client rend circuits:
- lite:
C -> G -> L2 -> Rend
- full:
C -> G -> L2 -> L3 -> Rend
But according to vanguards.md, a client rendezvous circuit is a STUB
circuit, in other words:
- lite:
C -> G -> L2 -> Rend
(like in the vanguards spec) - full:
C -> G -> L2 -> L3 (== Rend)
(wrong)
So in other words, clients using full vanguards always use one of their L3 vanguards as the rendezvous point. This seems bad, because it means clients leak their L3 vanguards to the services they are connecting to (this could be a DoS vector: if you find out someone's vanguards, you can DoS them by DoSing the vanguards, at least until the vanguards are rotated).