checkpoint

censoredplanet · Sep 19, 2023 · 00dbc6c · 00dbc6c
1 parent a5e129c
commit 00dbc6c
Show file tree

Hide file tree

Showing 4 changed files with 118 additions and 1 deletion.
diff --git a/docs/diagrams/dns.msc b/docs/diagrams/dns.msc
@@ -0,0 +1,12 @@
+msc {
+  probe,remote;
+
+  probe box probe [label="Initial Test Setup"];
+  probe=>remote [ label = "Write DNS Query over UDP" ];
+  probe<=remote [ label = "Read Response" ];
+  probe box probe [label="Validate IP Match"];
+  probe=>remote [ label = "Query Non-matching IPs for Domain over HTTP/S" ];
+  probe<=remote [ label = "Read Responses" ];
+  probe box probe [label="Validate response certificate for domain"];
+  probe box probe [label="Test Complete"];
+}
diff --git a/docs/diagrams/dns.svg b/docs/diagrams/dns.svg
diff --git a/docs/outcome.md b/docs/outcome.md
@@ -40,6 +40,10 @@ Not all tests include every stage depending on the type of test. For example sin
 
 ![https connection diagram](diagrams/https.svg)
 
+##### DNS
+
+![dns connection diagram](diagrams/dns.svg)
+
 ### Outcome Classes
 
 Basic outcomes represent simplest types of errors, as well as the `match` case (no error detected).
@@ -76,4 +80,9 @@ Mismatch Errors are used when the connection is successful, but the content rece
 | body_mismatch           | The HTTP body didn't match, potentially a blockpage |
 | tls_mismatch            | An element of the TLS connection (certificate, cipher suite, or TLS version) didn't match |
 | blockpage               | The response was unexpected and matched a [known blockpage]((https://github.com/censoredplanet/censoredplanet-analysis/blob/master/pipeline/metadata/data/blockpage_signatures.json)) |
-| trusted_host            | The response didn't match the expected response for the template. But it did match a common known server pattern, and is likely not censorship. This outcome is used for CDNs that respond in network-specific ways to domains they host. |
+| trusted_host            | The response didn't match the expected response for the template. But it did match a common known server pattern, and is likely not censorship. This outcome is used for CDNs that respond in network-specific ways to domains they host. |
+
+## DNS Outcomes
+
+The Satellite data uses its own unique set of outcomes, and does not use stages.
+
diff --git a/docs/satellite_base_table.md b/docs/satellite_base_table.md