[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-relays] Key files encryption methods.

To: tor-relays@xxxxxxxxxxxxxxxxxxxx
Subject: Re: [tor-relays] Key files encryption methods.
From: Moritz Bartl <moritz@xxxxxxxxxxxxxx>
Date: Wed, 21 Aug 2013 13:12:55 +0200
Delivered-to: archiver@xxxxxxxx
Delivery-date: Wed, 21 Aug 2013 07:13:11 -0400
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=headstrong.de; h=content-transfer-encoding:content-type:content-type :in-reply-to:references:subject:subject:mime-version:user-agent :from:from:date:date:message-id:received; s=mail; t=1377083576; x=1378897977; bh=+m4+IUrBC3v7prxt9bpE1BiNsFSggncis4U3iMgaNYU=; b= ONQ33HUec4UKS5njofm1y86M5GZI9QoRi7DNTj8f2BxA+ETArwrZNzo1t31HLL+3 I3nIrC7EyNao4+0i6UmNAL5yZwkoHMTmy+oYLIW4C5wKN0Q55o1fDx7eKeTwWU5r geXXf/vGDAB/iyZqIszZ++ChJ0kaT6H+bNQQ3ysOSnc=
In-reply-to: <CA+Cdr4kR-LGD2RTAa1aLrqEyBeVs5pG5ekbJ6-h2cxDJeFyHtA@xxxxxxxxxxxxxx>
List-archive: <http://lists.torproject.org/pipermail/tor-relays/>
List-help: <mailto:tor-relays-request@lists.torproject.org?subject=help>
List-id: "support and questions about running Tor relays \(exit, non-exit, bridge\)" <tor-relays.lists.torproject.org>
List-post: <mailto:tor-relays@lists.torproject.org>
List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=subscribe>
List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=unsubscribe>
References: <CA+Cdr4kR-LGD2RTAa1aLrqEyBeVs5pG5ekbJ6-h2cxDJeFyHtA@xxxxxxxxxxxxxx>
Reply-to: tor-relays@xxxxxxxxxxxxxxxxxxxx
Sender: "tor-relays" <tor-relays-bounces@xxxxxxxxxxxxxxxxxxxx>
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130804 Thunderbird/17.0.8

On 21.08.2013 11:56, Tony Xue wrote:
> Is that those key files are only loaded when the Tor start and reload?
> So could it be possible to decrypt the file before the start-up and
> encrypt them again after the Tor start-up process is complete?

The files are required only on startup of the relay, so you can keep
them stored wherever (offsite, in an encrypted container, ...), and
remove them from the live system after you start Tor.

https://trac.torproject.org/projects/tor/wiki/doc/OperationalSecurity

-- 
Moritz Bartl
https://www.torservers.net/
_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

References:
- [tor-relays] Key files encryption methods.
  - From: Tony Xue

Prev by Author: Re: [tor-relays] Is it safe to run an exit node from a VPS provider?
Next by Author: Re: [tor-relays] Increase of number of new relays and exit nodes
Previous by thread: [tor-relays] Key files encryption methods.
Next by thread: Re: [tor-relays] Key files encryption methods.
Index(es):
- Author
- Thread