[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
[tor-bugs] #20928 [Community/Outreach]: Document our privacy-preserving webserver log setup for the world
#20928: Document our privacy-preserving webserver log setup for the world
------------------------------------+------------------------------
Reporter: arma | Owner: mrphs, ailanthus
Type: task | Status: new
Priority: Medium | Milestone:
Component: Community/Outreach | Version:
Severity: Normal | Keywords:
Actual Points: | Parent ID:
Points: | Reviewer:
Sponsor: |
------------------------------------+------------------------------
We use a novel log format for our webservers, which makes sure we don't
collect the IP addresses of our visitors, and doesn't record the precise
timestamp of the visits, yet still produces a format compatible with
various log parsing tools.
Everybody in the world should be doing this.
We should document what we do and how and why, and tell the world so
everybody else can do it too.
Apparently Debian uses the same approach we do, so we have some adoption
already, but much more remains!
See
http://seclists.org/nmap-announce/2004/16
for some of our original motivation.
And see
http://lists.spi-inc.org/pipermail/spi-general/2016-December/003645.html
for a summary of what we do currently.
We should also invite/encourage people to find bugs in our set-up. It can
always get better!
And lastly, a blog post like this will be really useful to point to when
we start doing analysis and graphs and metrics and stuff.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/20928>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs