[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-relays] FamilyGenerator: Tor MyFamily Generator



Hi,

On 22/07/18 10:11, nusenu wrote:
> - you run your own AS and all servers in that AS are under your control (parameter: as)
> https://metrics.torproject.org/onionoo.html#parameters_as

This effectively puts MaxMind in charge of MyFamily.

> - all your relays are under your own DNS domain and only you can generate DNS A records for that domain
> and [1] is implemented
> (note: these onionoo fields appear currently somewhat broken)

There is no attempt currently to perform any DNSSEC or other validation.
The changes don't actually improve trust, just allow you to see data
that was previously discarded (when there was no A record).

Onionoo is useful for many things, but I don't think this is one of
them. Instead, you can use Ansible/Salt/Puppet/whatever to configure
MyFamily and there are plenty of ways out there to do this.

Thanks,
Iain.

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays