Add note about DNS distinguishability attack

svn:r678

diff --git a/doc/tor-spec.txt b/doc/tor-spec.txt
index a9c99d07b13058b5d10f345bf9668785ba7df444..301cdf307cf2091fbc95caf14497fc8fc069e1b6 100644 (file)
--- a/doc/tor-spec.txt
+++ b/doc/tor-spec.txt
@@ -11,6 +11,9 @@ TODO: (very soon)
       - Specify truncate/truncated
       - Sendme w/stream0 is circuit sendme
       - Integrate -NM and -RD comments
+      - EXTEND cells should have hostnames or nicknames, so that OPs never
+        resolve OR hostnames.  Else DNS servers can give different answers to
+        different OPs, and compromise their anonymity.
 
 EVEN LATER:
       - Do TCP-style sequencing and ACKing of DATA cells so that we can afford