[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #17093 [Tor Sysadmin Team]: New VM for Jabber server
#17093: New VM for Jabber server
-----------------------------------+-----------------
Reporter: dgoulet | Owner:
Type: task | Status: new
Priority: normal | Milestone:
Component: Tor Sysadmin Team | Version:
Resolution: | Keywords:
Actual Points: | Parent ID:
Points: |
-----------------------------------+-----------------
Comment (by ioerror):
Replying to [comment:2 nickm]:
> Replying to [comment:1 ioerror]:
> > I'd like to support this effort as well - most importantly, I'd like
to make sure that this jabber server supports forward secrecy for all TLS
connections, has a Tor Hidden Service and that it also works for making
voice/video calls with clients like Jitsi.
>
> +1. (Actually, could it be made to _only_ support TLS? Plaintext-over-
TCP is so very 1980s.)
>
Yes, I think so - this is actually a jabber best practice as of this year.
> Anyway, I'm in favor here. What resources would the VM require?
I think it depends on scale - I bet we can start with 1-2GB of RAM and
minimal disk for a minimal debian TPO install.
>
> And would this be on the same VM as the contemplated mumble server, or
is that something we would want to be doing on a separate VM?
I'd like to keep them separate. I suspect that the xmpp server software is
safer and I also think we should compartmentalize our communications
risks. Ideally the xmpp server doesn't ever relay unencrypted data while
the mumble server is only relaying (internally, still TLS encrypted to
clients) unencrypted audio.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/17093#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs