Back to matrix

F16-TO: Yes

Rationale

The declared onion-v3 client-authorization profile restricts access using client keys. The Tor Project documents revocation by removing the client authorization file and restarting Tor. The task permits this interruption; editing a file without restart is not credited. Keep authorization enabled by retaining at least one valid entry, or disable the service when the allowlist is empty.

Assessment method

Documentary analysis; no protocol execution

Source context

Primary specification / explicit selected policy

Outstanding qualification

Test the documented restart cutover with cached descriptors and old circuits, verify authorized-client recovery and denied-client failure, and test the empty-allowlist case without accidentally making the service public.

Public sources