tor security issue and suggestions and fixes
recently, i have heard about kax17 malicious tor relays which deanonymise tor users and i read about i2p and i wonder if tor can have the following counter measures implemented :
-
seperate tor relays for incoming and outgoing data like 3 relays for incoming and 3 relays for outgoing. (which can improve privacy and security)
-
by default in the tor config make every user run tor as a relay (which can make tor more decentralise as well as more tor relays and making tor faster)
-
upnp support in tor config on linux as most mordern routers support it (which can help many users who want to contribute to tor).
-
less traffic time spent on each tor relay (which can again improve privacy).
-
Moving away from circuit switching to packed switching
i know atleast people can contribute few kilobits which can also be a good thing because like how if gather alot of twigs together in one place it can become a big pile and also you guys can put some tweaks in place for it so that even people low bandwith and slow internet can contribute and if someone cannot or those who don't want to contribute put an option in tor config to turn it off but by default put 2).
and kax17 is one example. i have heard a few more in the past and we may see more of them in the future. so i think you should make a seperate fork or a branch and start implementing my ideas and fixes and then merge it when it is perfect. i am not forcing you because its your project and i can't really force you to move tor in some other directions and also you might be having a good idea behind not going in that way but i think you should try fixing it. it might take time, space and effort but if it is worthful (like google inventor's ideas which led to popular google search engine) than you should consider moving in that direction and also i know not every thing is 100% solid proof but you can bring up to 95%.
NOTE: i have no intentions to fight or disrespect you or your projects.
sorry, for the length and if i have posted this issue in the wrong place sorry for it as well because i am new to posting issues.
Thanks for your time and your project. you guys are doing great job by your project (thumbs up! and your work is appreciated).