目前，路径长度硬编码为 3跳（访问洋葱服务除外）。

Why not longer?

我们不鼓励使用更长的路径，因为这将增加网络的负载，而（据我们所知）未增加任何安全性。

同时，长度超过 3 的线路可损害匿名性。首先，这将安全拒绝攻击变得更容易；其次，如果只有少数用户使用相同长度的路径，它可成为用于识别用户的标识器。

Why not shorter?

If we made two-hop paths, then a relay on either end of the circuit would know which relay it needs to attack (whether break into, collaborate with, or maybe just surveil) in order to identify the user.

Whereas with three-hop paths, a relay on one end doesn't immediately know which relay they would need to attack, increasing the cost, effort, and uncertainty of an attack.