With Bridges, dirclient and dirmgr errors will become sensitive.
When we have bridges, we'll start asking them for their router descriptors. That means that the identity of a directory that succeeded or failed will now become a sensitive piece of information, that we will need to be concerned about logging.
This will apply mostly to Errors in dirclient
and dirmgr
.
We need to look at:
-
tor-linkspec
-
tor-dirclient
/tor-dirmgr
-
tor-chanmgr
-
tor-circmgr
-
tor-proto
no OwnedChanTargets in the Error type, but we should look at the strings that are formatted to make those errors -
tor-guardmgr
no OwnedChanTargets in the Error type, but we should look at the strings that are formatted to make those errors
Edited by Ian Jackson