Add a changes file for the bug1912 fix

diff --git a/changes/bug1912 b/changes/bug1912
new file mode 100644 (file)
index 0000000..5a7af75
--- /dev/null
+++ b/changes/bug1912
@@ -0,0 +1,9 @@
+  o Major bugfixes:
+    - When weighting bridges, we used to trust the bandwidths they provided
+      in their descriptor, only capping them at 10MB/s. This turned out to be
+      problematic for two reasons: Bridges could claim to handle a lot more
+      traffic then they actually would, thus making more clients pick them and
+      have a pretty effective DoS attack. The other issue is that new bridges
+      that might not have a good estimate for their bw capacity yet would not
+      get used at all unless no other bridges are available to a client.
+      This fixes bug 1912; bugfix on 0.2.2.7-alpha.