[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-relays] Let's increase the amount of exit relays doing DNSSEC validation
- To: tor-relays@xxxxxxxxxxxxxxxxxxxx
- Subject: Re: [tor-relays] Let's increase the amount of exit relays doing DNSSEC validation
- From: Jonathan Sélea <jonathan@xxxxxxxx>
- Date: Sun, 15 Apr 2018 21:09:02 +0200
- Arc-authentication-results: i=1; hashmal.selea.se; dkim=pass header.d=selea.se header.i=@selea.se header.b=Pk3T59L6 reason="2048-bit key; unprotected key"; dkim-adsp=pass reason="2048-bit key; unprotected key"; dkim-atps=neutral reason="2048-bit key; unprotected key"
- Arc-filter: OpenARC Filter v0.1.0 hashmal.selea.se 07A474A3D9
- Arc-filter: OpenARC Filter v0.1.0 hashmal.selea.se 3E98D4A3DA
- Arc-message-signature: i=1; a=rsa-sha256; d=selea.se; s=dkim; t=1523819347; c=relaxed/simple; bh=uzkpmxl/X1po5fe+vK+5zcKBjoYycz3ic2hc2w1pOTU=; h=DKIM-Signature:X-Virus-Scanned:Received:Received:DMARC-Filter: Subject:To:References:From:Openpgp:Autocrypt:Message-ID:Date: User-Agent:MIME-Version:In-Reply-To:Content-Type:ARC-Filter; b=lWZYGzS3kfGxXMKc7mXdSwhvWW4jR+v1d56DwealfgE+TFhtTZ9d9uYprX1kXZ8toOBg7fywp18jphtso+LvUVbP0kBb01LF5CbfUsCZIqRsrhzsCRpZwSgJf71lq0syjFisu1MN2F0Ec086mISafgS6iA+8OS8N2cFRYGIyTgAZKmnDQ26JVqG9wnLod/t3R1E4SFf2hOWAXM9tfEEePsgLRq5WkNKbyDmEObxpiWENerYNax/FO1772B1QcOBBjMQm9goI3A7p3V1OXEWy7GTdpFA4T1lmFU0gNAADlG41QED7bqVqub4Z1hj4dWbgm5mNo/Ljv9ADN7D7+1yfnA==
- Arc-seal: i=1; a=rsa-sha256; d=selea.se; s=dkim; t=1523819347; cv=none; b=PbSt7t/7s7OcExmO3zJ1LldITeO+vc61yTH5hobBBHhm1guNAwBNGssHGVJIDt9C/hdWmVd7G8mUdtkDEZLg5Zhe7OlPUo10eHLY4TuRlz8/y7yyv76cEe+6T2mAz4Zs/9YxawiGrVPI7EwtV2OoDoY5UyRtRYltHumQSch5PxXrzX44OIb+hTby62pheLv/3enTVXmkFzIBQetnlTvh2q0RyB96eMFKZi3tMJXyaWNh2zCMpgQrs0D8OnYCu1hslEh6jZNBRcQCJaVCiYpdAqoVDZWLw394P+8kX58MfibMS/IAzqSHmtrO2x8duHp3eT7TsR5ayFUjhdA8OnUeQA==
- Authentication-results: hashmal.selea.se; dkim=pass reason="2048-bit key; unprotected key" header.d=selea.se header.i=@selea.se header.b=Pk3T59L6; dkim-adsp=pass; dkim-atps=neutral
- Autocrypt: addr=jonathan@xxxxxxxx; prefer-encrypt=mutual; keydata= xsFNBFnTzswBEACyH2gw1ufFxdzmkyWsr9zIJCvcRgZM5otQORD4P7pVGODvCXnbgBb46ERv gBk73LLYuFpK5nJ8Zr4Xwe0SXiO+YJ9kgAkLEmFRQE7baanL3G0NuznrWBPVlBdEbT7ejlM9 yCmSf/MGj6ZExoHGjGsElwCfIyCOOBLqDdwBFPJK8/s/vIGt7vOML2kRL8/SQHKnmPcA8YyH BJL0Yc4GcojSuqxbh0hTH4PR5s4KP4tatjsBWFVamJvBH3TUHfPNKsh4nMi6+UppRubyooFL K3/NoAxsNqTDpzOblw9JsWrgunqQkSS3G1sghXLa8X0v7EHPx1qNSHd2n393cpNx7d1wEddB k4dywudwFreBf0fdeYmIVcCxoZdrxK4Kqs30RefEwpjv2smHVLerq6p/0Thu1Uvdlkya3a43 6GzVlPLEc9MPQFkBdiPoejYvkCqqQRqvcRVdyNc6/meMgnTsOVZDNwUtA2yYfegRddc21een HF5rdPmAgTHTOS2ZoHfqWB+gnp8w6iYFZaJz5U5kEDBthiGtOubUkuVhB+WwuQFmAmbXoRNJ su0fzini4EbT9CxVV8ta4ueXsckiTu8DTCAjIOnzYxBSyY+CT+pqH0M0sC8hoLfIUBPnRUrM ls5miIEYnzgheGB0KrIZT8A+VgBhhZ6y9vduiz7RFVG2DJZ7VwARAQABzSNKb25hdGhhbiBT w6lsZWEgPGpvbmF0aGFuQHNlbGVhLnNlPsLBlwQTAQgAQRYhBEryEN6Za2c8D9ivoIs1s8iU uWTdAhsjBQkJZgGABQsJCAcCBhUICQoLAgQWAgMBAh4BAheABQJachv5AhkBAAoJEIs1s8iU uWTd71sQAJKCQVagU+X6NgKE0rKF5QTAHz8EwZlLVXYcDY+ofxniAQEGf9r+MGlsJWvg7gLs Pe50h/fIseZ+q9wqracFGIaexGfzn7K6pVLQ39rjsnARigrPluDzmbvlyjctVIwXtSFRdqe7 Flc6dUVJJRaqDXJCps4iVdjGvcMNm7YXI7sDo4xLkNblHo45Q9BZBVfTXj59zQYdcY1+hz0M IfbhemLf1dhxXzkjmCRbNisvyPhJZTknMzoHXTNtgR+yB60cHJnDlhdpjUnQ5VGCkOBBqRnG m1jXVP4pILd3KwNZeP3nV7OFK/RAdyxdeBbxRM1mISZUnKB8aVFURv9DvyewYTEE/+t+EG2n QGXDNct1bVkzBnOtzvyKxTrvCq+NnhHwHgIE+w6UNkNEy0kROzR1JmAiaXECa8E7fX7+AU89 zR21j7Xo3Fum/n6uq0uwPwRkym7GYZkF3yBvnlNeI0j1+hiw8Enp4Dun4OGExecTabRcc2vq vBu3opc4i6S45MCRaELEvUQEEhhdtBFc+koxpoijtMgrbTP5Yj2ZSVO3GNmxusBj2VzDTVPg RO/Ya7BGemJwMHBdCqhLiupwwbP6wFtRwp9Ezpm0ewYuIH/wa/E7fm1v0xYWdUXDBDhASXUZ Q1kvD/A+iU18LxgR236RfpGYBC17oKYC0Dnx6wADjO8JzsFNBFnTzswBEADvOuFy0SKwNHoy J4M/bAFShUK4jRE9E1Qblk4AR+jn2w2dEYDBsITGFBAV9voD4u3ImvJ9YYgK3SFjl6Q9prDg 8HM+LW3FE065bYy0e+Kdgbuh6H6ruPfddb9C52t6Ys3henX0Sej503t9dmGywKbPhuh5I9EU BAqEomdshTm6DoYYZq60s4cPT+SfUyEbKqjdCF/kqBc/uJTBTJAVDGOFJgTzCuEaWxphzZgX 6DJQGD7sYdLrmZfDJY6JOV02dhxfwtylmdj6/gug5LYtMwgV6HxlGyl6GudvrMHVoHAxFrcK 2yVA6ULW83UtGzdvts19WF6ZqEvbrBZ+TPn0jk2juba+Bw2DMYGS1Ba0bnrFWu24CPE9hp7L mOs0YN0IXHeFhU+ZE68W5lGAwoBZAgrgpYBLZ6RiN4+TfLRvIUbivkUDp1h/7b0hd6YaVznA YBC11IeeuLLIsteMCWcwgmDrlJ4++sRecqveeFBfX7EAlJSWz0bj4BIK+EovgKfjIzJRxOxJ E9SFUqMTBJWK16MJ+UmNzH5/XjzUYyOWXtjB9gZrzpVqH6rRIRgSkQqQ5edUmHqI3/YzPjl6 faQSSf03VS1CqTZUQwOB+20cy+XzBJ8dP9smRP7WQqa/a7695ude8i/mrq2HXwd6sxuSbQlL lhZE6xAwBmKldt9VFwrdRQARAQABwsF8BBgBCAAmFiEESvIQ3plrZzwP2K+gizWzyJS5ZN0F AlnTzswCGwwFCQlmAYAACgkQizWzyJS5ZN12fw//ZYuUJ1WfpfV3qdggeNzPSdf46aXfmM6B SKUzgTrBitVsDd0mTfzXL357ntlrz1LjZW69Xkmi5Sn+E3i+hIciQ/Jg3aKTloM/oDCzkTUH SIWPr/myfHL/+QPU+xTQudDitcCBwgtfb0LnHeqbLV1ebu/1raS04776vfGbN2a3Ka6y5qS2 N+EMCAgkRW2jo2MaR5j1QaveK7oVWEGKNbrIozdZ+1Slgr5y+UTvdAHCPPBlDy/DKJhBy2SM IRv6rHSYhswmWez8k+EMtkgkVPUnPUwHLUmbiYHSl0l+0vBGHAz4mB39lvj/9gFMXWFDwlKW RnYra5G0xjPSuUgPs2FAsFvOZDwJvRU1D12FbUjGlj2X6oN9k0nakSJi6aERgXg/oV7PVKq3 eIcJ4RsfEruDjdYEL7sTQAhZdg0sCuRO3lPp6QqkDfPbPc5UBURgLRkEzfhW90f1Pn8+BuqB X8OPWFKmt83PXQ5+JU8wrzNDn/KJtDmgn/AdjfGp9n0yqdVE0a7agb/Z7jKcnOrlGFmU5oAM /6lRT0GNsXgVoQcuYBlzmiC0l56sdKRHfbh63N64tsooAcq930mBDtKrFjKQ0Q2k5LhFvDHP 1OjpTXTQRFv3/dSiZCv4LJXDfk2cu7FYYHY6n/eBA6QprMjI4zMkS8ov+RPDPlKeii8P1Q77 SD0=
- Delivered-to: archiver@xxxxxxxx
- Delivery-date: Sun, 15 Apr 2018 15:18:09 -0400
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/simple; d=selea.se; h= content-type:content-type:in-reply-to:mime-version:user-agent :date:date:message-id:from:from:references:to:subject:subject; s=2018q2; t=1523819346; x=1524683347; bh=uzkpmxl/X1po5fe+vK+5zc KBjoYycz3ic2hc2w1pOTU=; b=Pk3T59L67hGKd/QVHS4zAVKA3jhP7IunBz26t4 gTqNv825RYnVfD0y2kb23KfSVc9HVdxqpva0f1D719DvSkECdGg14yWdLiku5TR4 bgHujp/WUTfAoxW+M6U+dBIw7OwZ3rLk7WxqYFPOB/RfILcS7KZyAi2eHhHkNJjW z4vnMxQllz46Jcw3L8YR0YeKi9ymankOxNOHN/K0cD3sw4maDWahysWcRFvIAxiR dITcs4U5+F5wX/+xxwXC8ElX3tm+LOoKE6bGKC4PiJaoarpngC0ipcgAfD+pdByy Bq/bg2HzeKtwXzh8hOjviuXEfob8Qf9oJ6g6Jw1Mg0jIblJA==
- Dmarc-filter: OpenDMARC Filter v1.3.2 hashmal.selea.se 07A474A3D9
- In-reply-to: <d0a81212-e239-4164-534e-ed5081173d78@monksofcool.net>
- List-archive: <http://lists.torproject.org/pipermail/tor-relays/>
- List-help: <mailto:tor-relays-request@lists.torproject.org?subject=help>
- List-id: "support and questions about running Tor relays \(exit, non-exit, bridge\)" <tor-relays.lists.torproject.org>
- List-post: <mailto:tor-relays@lists.torproject.org>
- List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=subscribe>
- List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=unsubscribe>
- Openpgp: preference=signencrypt
- References: <CAPQndox6Q=yzNn8-NGp+9Feq16G3DvmgujUTRQqNLVxC2YYsdA@mail.gmail.com> <1393428856.232203.1523412642024.JavaMail.zimbra@apawc.com.au> <ae5b00ab0acd7b3c6d2acf7664355ce9@dietrich.cx> <d0a81212-e239-4164-534e-ed5081173d78@monksofcool.net>
- Reply-to: tor-relays@xxxxxxxxxxxxxxxxxxxx
- Sender: "tor-relays" <tor-relays-bounces@xxxxxxxxxxxxxxxxxxxx>
- User-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.7.0
Great initiative!
Personally I would also see some sort of "DANE" for Tor-relays in the
future too, but that is a request for another thread.
/ Jonathan
> On 12.04.18 13:05, Alexander Dietrich wrote:
>
>> Just to be safe, you could also check the rest of the dig output and
>> /etc/resolv.conf (or relevant resolver configuration on your system)
>> to make sure your BIND is being used.
> I have seen hosters where /etc/resolv.conf is overwritten whenever the
> system reboots, and in these cases I used the following:
>
> # Add this to /etc/tor/torrc
> ServerDNSResolvConfFile /etc/tor/resolv.conf
>
> # /etc/tor/resolv.conf
> nameserver 127.0.0.1
> # IPv6 alternative
> #nameserver ::1
>
> -Ralph
>
> _______________________________________________
> tor-relays mailing list
> tor-relays@xxxxxxxxxxxxxxxxxxxx
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Attachment:
smime.p7s
Description: S/MIME-kryptografisk signatur
_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays