Re: [tor-dev] Tor HS keys password protection against impersonation attacks?

2012-03-17 Thread Jacob Appelbaum
On 03/17/2012 02:52 AM, Fabio Pietrosanti (naif) wrote: > Hi, > thinking about Tor Hidden services, they are managed by using Hidden > Services client keys. > > The Tor HS keys are "private keys" that may require to be protected > because they represent also the "identity" of the Tor HS and if sto

Re: [tor-dev] Tor HS keys password protection against impersonation attacks?

2012-03-17 Thread Fabio Pietrosanti (naif)
On 3/17/12 11:02 AM, Jeroen Massar wrote: > On 2012-03-17 10:52 , Fabio Pietrosanti (naif) wrote: > [..] >> That way even in case of seizure of the server running the Tor HS >> it would not be possible to who seized the Tor HS Server to do actively >> Impersonation attacks of the Tor HS. > > If yo

Re: [tor-dev] [PATCH] tor-exit-notice.html: shorten Cornell URLs

2012-03-17 Thread Sebastian Hahn
On Mar 17, 2012, at 8:37 AM, Christian Kujau wrote: > Hi, > > these ever so long law.cornell.edu URLs are now automatically redirecting > to a shorter version - let's use that in our tor-exit-notice.html as well. > > Christian. Hi, and thanks for the patch. I've filed a trac ticket[0] for thi

Re: [tor-dev] Tor HS keys password protection against impersonation attacks?

2012-03-17 Thread Jeroen Massar
On 2012-03-17 10:52 , Fabio Pietrosanti (naif) wrote: [..] > That way even in case of seizure of the server running the Tor HS > it would not be possible to who seized the Tor HS Server to do actively > Impersonation attacks of the Tor HS. If you want to protect these files, use proper full disk c

[tor-dev] Tor HS keys password protection against impersonation attacks?

2012-03-17 Thread Fabio Pietrosanti (naif)
Hi, thinking about Tor Hidden services, they are managed by using Hidden Services client keys. The Tor HS keys are "private keys" that may require to be protected because they represent also the "identity" of the Tor HS and if stolen, it would be possible to carry on impersonation attack on connec

[tor-dev] [PATCH] tor-exit-notice.html: shorten Cornell URLs

2012-03-17 Thread Christian Kujau
Hi, these ever so long law.cornell.edu URLs are now automatically redirecting to a shorter version - let's use that in our tor-exit-notice.html as well. Christian. diff --git a/contrib/tor-exit-notice.html b/contrib/tor-exit-notice.html index de3be17..8cf5c29 100644 --- a/contrib/tor-exit-notic