Contact info obfscation
Hello, I am aware that email addresses used in the “ContactInfo: “ in a relay operator’s torrc file is publicly listed on the tor relay. However, what I am wondering, is there a way to obfuscate the email address on http://torstatus.blutmagie.de/router_detail.php?FP=db1af6477bb276b6ea5e72132... to appear as “k—f---b--@g-ail.com” or something of the sorts, while keeping the real email address readable for tor cloud to send mail to? It seems like obfuscating the email address in the torrc file would cause it to become unreadable to the tor project as well. Thank you.
I am aware that email addresses used in the “ContactInfo: “ in a relay operator’s torrc file is publicly listed on the tor relay. However, what I am wondering, is there a way to obfuscate the email address on http://torstatus.blutmagie.de/router_detail.php?FP=db1af6477bb276b6ea5e72132... to appear as “k—f---b--@g-ail.com” or something of the sorts, while keeping the real email address readable for tor cloud
I'm not sure I know what you mean with "tor cloud" can you describe what you mean?
It seems like obfuscating the email address in the torrc file would cause it to become unreadable to the tor project as well.
the contact info string will be published the same way you put it in your torrc configuratin file if you want to make it harder for email address harvesters / spammers to send you email you can obfuscate it however you like. in the following spec I'm using a specific way to obfuscate the "@" sign with a "[]" so I can process email addresses automatically, but it is up to you how you obfuscate your address https://github.com/nusenu/ContactInfo-Information-Sharing-Specification#emai... -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu
What I mean is tor project, the system that sends an email when it notices that a relay has been unavailable for 48 hours or the relays not working right. Sent from my iPhone
On Jun 30, 2018, at 6:02 AM, nusenu <nusenu-lists@riseup.net> wrote:
I am aware that email addresses used in the “ContactInfo: “ in a relay operator’s torrc file is publicly listed on the tor relay. However, what I am wondering, is there a way to obfuscate the email address on http://torstatus.blutmagie.de/router_detail.php?FP=db1af6477bb276b6ea5e72132... to appear as “k—f---b--@g-ail.com” or something of the sorts, while keeping the real email address readable for tor cloud
I'm not sure I know what you mean with "tor cloud" can you describe what you mean?
It seems like obfuscating the email address in the torrc file would cause it to become unreadable to the tor project as well.
the contact info string will be published the same way you put it in your torrc configuratin file if you want to make it harder for email address harvesters / spammers to send you email you can obfuscate it however you like.
in the following spec I'm using a specific way to obfuscate the "@" sign with a "[]" so I can process email addresses automatically, but it is up to you how you obfuscate your address
https://github.com/nusenu/ContactInfo-Information-Sharing-Specification#emai...
-- https://twitter.com/nusenu_ https://mastodon.social/@nusenu
_______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Keifer Bly:
What I mean is tor project, the system that sends an email when it notices that a relay has been unavailable for 48 hours or the relays not working right. currently there is no such service as far as I know, in the past (when Tor Weather still existed) they didn't use ContactInfo data to send emails, but operators would subscribe and submit their email address via a website, subscription email addresses weren't public (unlike ContactInfo) -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu
Ok. So if that’s not being used anymore, what is the “ContactInfo: “ string used for? Is there still a way I can subscribe my email address to tor project for such things? Thank you.
On Jun 30, 2018, at 8:40 AM, nusenu <nusenu-lists@riseup.net> wrote:
Keifer Bly:
What I mean is tor project, the system that sends an email when it notices that a relay has been unavailable for 48 hours or the relays not working right. currently there is no such service as far as I know, in the past (when Tor Weather still existed) they didn't use ContactInfo data to send emails, but operators would subscribe and submit their email address via a website, subscription email addresses weren't public (unlike ContactInfo) -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu
_______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Keifer Bly:
Ok. So if that’s not being used anymore, what is the “ContactInfo: “ string used for?
ContactInfo is not used by (past) Tor Weather implementations but it is still very much useful when people want to reach the operator. Some potential reasons to reach the operator are: - misconfiguration - security issues - disfunctional relay
Is there still a way I can subscribe my email address to tor project for such things?
as I say in my last email there is no such service (Tor Weather) replacement (yet) -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu
So I just changed my torrc file contactinfo to Keifer dot bly at gmail dot com Do I need to restart my relay for this to take effect? Will doing this make it more difficult for spammers to reach my address? Thanks. From: nusenu Sent: Saturday, June 30, 2018 12:54 PM To: tor-relays@lists.torproject.org Subject: Re: [tor-relays] Contact info obfscation Keifer Bly:
Ok. So if that’s not being used anymore, what is the “ContactInfo: “ string used for?
ContactInfo is not used by (past) Tor Weather implementations but it is still very much useful when people want to reach the operator. Some potential reasons to reach the operator are: - misconfiguration - security issues - disfunctional relay
Is there still a way I can subscribe my email address to tor project for such things?
as I say in my last email there is no such service (Tor Weather) replacement (yet) -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu
Terribly sorry, one last question I just thought of. Will that make it more difficult for people who legitimately want to contact the relay operator who aren’t spammers to contact me? Thank you. From: Keifer Bly Sent: Saturday, June 30, 2018 7:36 PM To: tor-relays@lists.torproject.org Subject: RE: [tor-relays] Contact info obfscation So I just changed my torrc file contactinfo to Keifer dot bly at gmail dot com Do I need to restart my relay for this to take effect? Will doing this make it more difficult for spammers to reach my address? Thanks. From: nusenu Sent: Saturday, June 30, 2018 12:54 PM To: tor-relays@lists.torproject.org Subject: Re: [tor-relays] Contact info obfscation Keifer Bly:
Ok. So if that’s not being used anymore, what is the “ContactInfo: “ string used for?
ContactInfo is not used by (past) Tor Weather implementations but it is still very much useful when people want to reach the operator. Some potential reasons to reach the operator are: - misconfiguration - security issues - disfunctional relay
Is there still a way I can subscribe my email address to tor project for such things?
as I say in my last email there is no such service (Tor Weather) replacement (yet) -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu
Keifer Bly:
Will doing this make it more difficult for spammers to reach my address?
Yes. However, I think you should consider publishing your unobfuscated email address, for clarity and convenience to those who are legitimately trying to contact you. I don't obfuscate my email address in the ContactInfo field, and I receive at most a few handfuls of spam messages per month. Most of these are caught by my email provider's spam filter, which I already have set to its least aggressive setting possible. alkyl
If you are worried about putting a real address you can use a forwarding only address under a different domain. Do you think it would be useful if you had been given an address like aabbcc@torexitnode.net? As part of a different thread on this list I asked what are some of the services and thinga Tor relay operators are missing. Perhaps an easy forwarding only email address that will hide to some degree the real email address. It also makes it very easy to filter and figure out if it's spam or not. Wdyt? On Mon, 2 Jul 2018, 9:24 , <alkyl@riseup.net> wrote:
Keifer Bly:
Will doing this make it more difficult for spammers to reach my address?
Yes. However, I think you should consider publishing your unobfuscated email address, for clarity and convenience to those who are legitimately trying to contact you.
I don't obfuscate my email address in the ContactInfo field, and I receive at most a few handfuls of spam messages per month. Most of these are caught by my email provider's spam filter, which I already have set to its least aggressive setting possible.
alkyl _______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Very well, I will change it back. I just wish there was an easier way to block spammers… From: Eran Sandler Sent: Sunday, July 1, 2018 11:37 PM To: tor-relays@lists.torproject.org Subject: Re: [tor-relays] Contact info obfscation If you are worried about putting a real address you can use a forwarding only address under a different domain. Do you think it would be useful if you had been given an address like aabbcc@torexitnode.net? As part of a different thread on this list I asked what are some of the services and thinga Tor relay operators are missing. Perhaps an easy forwarding only email address that will hide to some degree the real email address. It also makes it very easy to filter and figure out if it's spam or not. Wdyt? On Mon, 2 Jul 2018, 9:24 , <alkyl@riseup.net> wrote: Keifer Bly:
Will doing this make it more difficult for spammers to reach my address?
Yes. However, I think you should consider publishing your unobfuscated email address, for clarity and convenience to those who are legitimately trying to contact you. I don't obfuscate my email address in the ContactInfo field, and I receive at most a few handfuls of spam messages per month. Most of these are caught by my email provider's spam filter, which I already have set to its least aggressive setting possible. alkyl _______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Keifer Bly:
So I just changed my torrc file contactinfo to Keifer dot bly at gmail dot com
Do I need to restart my relay for this to take effect?
restart is not required but you need to reload it
Will doing this make it more difficult for spammers to reach my address?
yes, probably (for some spammers/harvesters) but updating the contactinfo will not remove older contactinfo strings since they are all archived and so spammers can still see the former (non-obfuscated) version of that contactinfo string
Will that make it more difficult for people who legitimately want to contact the relay operator who aren’t spammers to contact me?
If they want to do it automatically: yes if they do it manually: probably not -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu
How do I reload the relay without restarting it? Thank you. From: nusenu Sent: Sunday, July 1, 2018 2:07 AM To: tor-relays@lists.torproject.org Subject: Re: [tor-relays] Contact info obfscation Keifer Bly:
So I just changed my torrc file contactinfo to Keifer dot bly at gmail dot com
Do I need to restart my relay for this to take effect?
restart is not required but you need to reload it
Will doing this make it more difficult for spammers to reach my address?
yes, probably (for some spammers/harvesters) but updating the contactinfo will not remove older contactinfo strings since they are all archived and so spammers can still see the former (non-obfuscated) version of that contactinfo string
Will that make it more difficult for people who legitimately want to contact the relay operator who aren’t spammers to contact me?
If they want to do it automatically: yes if they do it manually: probably not -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu
On 1 Jul 2018, at 21:10, Keifer Bly <keifer.bly@gmail.com> wrote:
How do I reload the relay without restarting it?
To reload all the tor instances on your machine: killall -HUP tor To reload just one tor instance: kill -HUP `cat tor.pid` If you have "PidFile tor.pid" in your torrc. T
Le 30/06/2018 à 09:02, nusenu a écrit :
https://github.com/nusenu/ContactInfo-Information-Sharing-Specification#emai...
Does this have any chance to be adopted inside Tor or will it stay a side project? -- Johan Fleury PGP Key ID : 0x5D404386805E56E6
https://github.com/nusenu/ContactInfo-Information-Sharing-Specification#emai...
Does this have any chance to be adopted inside Tor or will it stay a side project?
I don't think it will be adopted by the tor project and I don't aim for that, but I like the growing number of relays using it. If adoption should ever become significant (>500?) maybe Relay Search will pick it up. -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu
I'd like to opt out of to relays. It's too technical for me. Thank you On Sun, Jul 1, 2018, 9:11 AM Iain Learmonth <irl@torproject.org> wrote:
Hi,
On 01/07/18 16:43, nusenu wrote:
If adoption should ever become significant (>500?) maybe Relay Search will pick it up.
It probably would. (:
Thanks, Iain.
_______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
On 2 Jul 2018, at 02:27, Kay Slake <jupiterstorm1@gmail.com> wrote:
I'd like to opt out of to relays. It's too technical for me. Thank you
You can unsubscribe here:
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
T
On 07/01/2018 03:18 PM, teor wrote:
On 2 Jul 2018, at 02:27, Kay Slake <jupiterstorm1@gmail.com> wrote:
I'd like to opt out of to relays. It's too technical for me. Thank you
You can unsubscribe here:
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
T
Maybe y'all ought to edit the list sig. I vaguely recall ... | To Unsubscribe, visit https://... ... being common, back in the day. The mptcp-dev list still has it. It's no longer the norm, sure. But isn't it true that unsubscribing is the main reason to visit the listinfo page? And seeing archives, of course.
Keifer Bly wrote on 30/06/2018 02:22:
Hello,
I am aware that email addresses used in the “ContactInfo: “ in a relay operator’s torrc file is publicly listed on the tor relay. However, what I am wondering, is there a way to obfuscate the email address on http://torstatus.blutmagie.de/router_detail...
Publish a GPG key instead. Spammers will have to go fetch your email from a keyserver. This is how I did it: http://torstatus.blutmagie.de/router_detail.php?FP=a4e74410d83705eeff24bc265... My two cents, bye, Marco -- https://metrics.torproject.org/rs.html#details/A4E74410D83705EEFF24BC265DE2B...
Nice. Perhaps nusenu can add that to the spec. The current spec has gpg support and keybase user, but perhaps there is a case for specifying the gpg server as well (like in Marco's case). Eran On Mon, Jul 2, 2018 at 10:30 AM Marco Predicatori <marco@predicatori.it> wrote:
Keifer Bly wrote on 30/06/2018 02:22:
Hello,
I am aware that email addresses used in the “ContactInfo: “ in a relay operator’s torrc file is publicly listed on the tor relay. However, what I am wondering, is there a way to obfuscate the email address on http://torstatus.blutmagie.de/router_detail...
Publish a GPG key instead. Spammers will have to go fetch your email from a keyserver. This is how I did it:
http://torstatus.blutmagie.de/router_detail.php?FP=a4e74410d83705eeff24bc265...
My two cents, bye, Marco
--
https://metrics.torproject.org/rs.html#details/A4E74410D83705EEFF24BC265DE2B...
_______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Eran Sandler:
Nice. Perhaps nusenu can add that to the spec. The current spec has gpg support and keybase user, but perhaps there is a case for specifying the gpg server as well (like in Marco's case).
Usually the key fingerprint is enough to find a key if it was uploaded to any major keyserver. I'm not sure about adding a keyserver field to the spec, instead of a keyserver field I would use a keyuri that points to the public key file on a https server directly. -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu
Works just as well :) Eran On Mon, Jul 2, 2018 at 11:51 AM nusenu <nusenu-lists@riseup.net> wrote:
Eran Sandler:
Nice. Perhaps nusenu can add that to the spec. The current spec has gpg support and keybase user, but perhaps there is a case for specifying the gpg server as well (like in Marco's case).
Usually the key fingerprint is enough to find a key if it was uploaded to any major keyserver.
I'm not sure about adding a keyserver field to the spec, instead of a keyserver field I would use a keyuri that points to the public key file on a https server directly.
-- https://twitter.com/nusenu_ https://mastodon.social/@nusenu
_______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
participants (10)
-
alkyl＠riseup.net -
Eran Sandler -
Iain Learmonth -
Johan Fleury -
Kay Slake -
Keifer Bly -
Marco Predicatori -
Mirimir -
nusenu -
teor