[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-relays] doc/HARDENING Draft
On Monday 24 November 2014 18:09:34 Libertas wrote:
> Here's the relevant ticket:
>
> https://trac.torproject.org/projects/tor/ticket/13703
>
> A specific topic of conversation is how much of the advice should be
> in the document itself as opposed to linked sources.
>
> It could also use more OS diversity. After reading it, you can
> probably guess which *nix flavors I'm familiar with.
>
> Enjoy,
> Libertas
I would add the following advice:
Don't store identity keys on the hard disk. Keep them offliner. Use a ramdisk
for /var/lib/tor/keys/ and copy keys to it via scp before starting your tor
instance. Remove it from the ramdisk after startup. So the keys cannot be
easily taken during unexpected downtimes.
Regards,
torland
_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays