Delivery-Date: Tue, 15 Mar 2016 10:42:49 -0400
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.1 required=5.0 tests=BAYES_00,DKIM_SIGNED,
	RCVD_IN_DNSWL_MED,T_DKIM_INVALID,T_RP_MATCHES_RCVD autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id B9AF91E1014;
	Tue, 15 Mar 2016 10:42:47 -0400 (EDT)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id C73573968A;
	Tue, 15 Mar 2016 14:42:43 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id 120713927C
 for <tor-talk@lists.torproject.org>; Tue, 15 Mar 2016 14:42:40 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at 
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id RhezoCgTGZmP for <tor-talk@lists.torproject.org>;
 Tue, 15 Mar 2016 14:42:40 +0000 (UTC)
Received: from mail-ob0-x234.google.com (mail-ob0-x234.google.com
 [IPv6:2607:f8b0:4003:c01::234])
 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
 (Client CN "smtp.gmail.com",
 Issuer "Google Internet Authority G2" (not verified))
 by eugeni.torproject.org (Postfix) with ESMTPS id E71DD37F2C
 for <tor-talk@lists.torproject.org>; Tue, 15 Mar 2016 14:42:36 +0000 (UTC)
Received: by mail-ob0-x234.google.com with SMTP id fz5so19323510obc.0
 for <tor-talk@lists.torproject.org>; Tue, 15 Mar 2016 07:42:36 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=itechgeek-com.20150623.gappssmtp.com; s=20150623;
 h=from:mime-version:in-reply-to:references:date:message-id:subject:to;
 bh=KJ9dVEGwyVYjZqMlUPceDYDrZiHnlvE4pBvrE6P+/so=;
 b=EZzUdcngBYX1akNxUnHu81f6dCqwEORrC6sqNzt26nQb/jvSpx4mXsVDOPEtD4uPDj
 lMNsxchjmSgX1vk6NgH84s4xmbKoafh0g+tpHnQC9JLeWi7/niiM8LUVbYaU8BxC1nZS
 ZyaH/F2r4VM7V8QFB5U7FFlB1oWUnGy31A2gcmGbCJWmfPBlCyyNa1X2vAPw/9EnEjFJ
 CUhw4LiX/hCb6E+OfxzktAJDaXAkWNUM8xsVJDwjb4U3jP3hfkgcYOKZBVqU3xRDsGFC
 z9kZpyKs/hsTDWplgCNXOvQlyaL/k/6vl6G6tRhB4V+a3MtVbAzbJzviWMjPwHKFTeNw
 tFnw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20130820;
 h=x-gm-message-state:from:mime-version:in-reply-to:references:date
 :message-id:subject:to;
 bh=KJ9dVEGwyVYjZqMlUPceDYDrZiHnlvE4pBvrE6P+/so=;
 b=NKETUhYlU+dsVAWGzEaR33Fo3i0plCkPKDnRuwMSoBvSII4jxNaEaL6PeHKdmIA4L/
 pcBL5ocLkIy3qF5F5fE2WaPN2BEzMYpCETxO6Uz9cWb4BcR/t5b6miqjq01sk/7dcfUV
 GmY+gsubcOMVVNBtasNfr7uujncMY6zqewugt6TGYaXTNPU/9TvmseyMY0WgLysGzXz+
 CUt4cW9kUBKfXwf/n3azN1JoimTJPeZdEo9MCAP9oB10P/KFjGq+aMBrcT+yRYVLvuCu
 P4N7QlnT3OWC5Rl2Y/vq1WVWsBjsFluu3wq2yusSOXJosKe6QnhmFBHj4zqwpwkKgyCD
 BeXQ==
X-Gm-Message-State: AD7BkJJrE4ntrG65dEdfdu/tbMsXLI1L2E2KhFNZqZc0Fbm5d2MTWDY3AREyfTIaA1n1og==
X-Received: by 10.182.70.3 with SMTP id i3mr18911381obu.60.1458052954410;
 Tue, 15 Mar 2016 07:42:34 -0700 (PDT)
Received: from mail-oi0-f53.google.com (mail-oi0-f53.google.com.
 [209.85.218.53])
 by smtp.gmail.com with ESMTPSA id ji4sm11956350obc.6.2016.03.15.07.42.33
 for <tor-talk@lists.torproject.org>
 (version=TLSv1/SSLv3 cipher=OTHER);
 Tue, 15 Mar 2016 07:42:33 -0700 (PDT)
From: ITechGeek <itg@itechgeek.com>
X-Google-Original-From: ITechGeek <ITG@itechgeek.com>
Received: by mail-oi0-f53.google.com with SMTP id c203so14507091oia.2
 for <tor-talk@lists.torproject.org>; Tue, 15 Mar 2016 07:42:33 -0700 (PDT)
X-Received: by 10.202.102.94 with SMTP id a91mr15443549oic.22.1458052953229;
 Tue, 15 Mar 2016 07:42:33 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.202.90.4 with HTTP; Tue, 15 Mar 2016 07:42:13 -0700 (PDT)
In-Reply-To: <56E81D46.1050206@posteo.de>
References: <56E81D46.1050206@posteo.de>
Date: Tue, 15 Mar 2016 10:42:13 -0400
X-Gmail-Original-Message-ID: <CAN2EnhDLrPaB-bvVr1OWJYk5WdtFpxkrakEGboRWQ8pA68NvBQ@mail.gmail.com>
Message-ID: <CAN2EnhDLrPaB-bvVr1OWJYk5WdtFpxkrakEGboRWQ8pA68NvBQ@mail.gmail.com>
To: tor-talk@lists.torproject.org, martink@posteo.de
X-Content-Filtered-By: Mailman/MimeDel 2.1.15
Subject: Re: [tor-talk] What IPs does Torbrowser need?
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

And if they were willing to give that out, imagine how much China, Iran, or
a number of other gov'ts would love that list (although I doubt they'd be
whitelisting the IPs).

-----------------------------------------------------------------------------------------------
-ITG (ITechGeek)
ITG@ITechGeek.Com
https://itg.nu/
GPG Keys: https://itg.nu/contact/gpg-key
Preferred GPG Key: Fingerprint: AB46B7E363DA7E04ABFA57852AA9910A DCB1191A
Google Voice: +1-703-493-0128 / Twitter: ITechGeek / Facebook:
http://fb.me/Jbwa.Net

On Tue, Mar 15, 2016 at 10:33 AM, Martin Kepplinger <martink@posteo.de>
wrote:

>
> Hi
>
> Imagine a router that wants to only whitelist the IP addresses that
> Torbrowser needs to work. What IPs would it need (for start up and
> browsing and everything) ?
>
>  * Guards
>  * Authorities
>  * HSDir flagged relays (?)
>
> and would such a whitelisting of IPs even be enough? At least I think
> DNS can be ignored as it is routed over Tor too. Any more thoughts?
>
>
>                        martin
> --
> tor-talk mailing list - tor-talk@lists.torproject.org
> To unsubscribe or change other settings go to
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
>
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

