Sociotechnical Aspects of Tor Relay Rejection

2026-09-14

AI Summary

研究探讨了Tor项目版本过期政策对网络维护及用户匿名性的影响，通过用户调研和网络模拟方法分析其社会技术层面的后果。

Abstract

In 2019, the Tor Project enforced an end-of-life (EoL) policy for Tor versions, leading to the rejection of outdated relays, amounting to a notable fraction of consensus weight. While this policy aids network maintenance, reduces backporting efforts, and shortens vulnerability exposure, its sociotechnical implications remain unstudied. A user study ($N=26$) reveals that relay operators, though not universally aware of the EoL policy, generally view it favorably. Operational practices vary, occasionally excluding newly installed relays from the network. Network simulations, grounded in historical data, assess the policy's immediate impact on Tor clients against common adversaries. Results indicate a marginal adversarial advantage, with network churn (i.e., relays entering and exiting) exerting a more pronounced effect on user anonymity. Security metrics are introduced to evaluate relay contributions against two adversary models, enabling ranking by individual utility and security. Analysis of four exclusion rounds shows that a minority of rejected relays typically account for over 50% of the security provided by all excluded relays. Recommendations for EoL policy implementation are proposed to mitigate potential drawbacks.

Problem

• Tor Relay
• End-of-Life Policy
• Sociotechnical Implications
• Network Maintenance
• User Anonymity

Innovation

• End-of-Life Policy
• Network Simulations
• Security Metrics