[tor-relays] cryptsetup some folders

teor teor2345 at gmail.com
Tue Oct 25 10:05:17 UTC 2016


> On 25 Oct. 2016, at 21:03, Duncan Guthrie <dguthrie at posteo.net> wrote:
> 
> Hi folks, 
> 
> I am not sure it is more secure. What are we trying to protect here? As long as the relay is running,it is unencrypted. Disk encryption only prevents physical access - are you at risk of this? At any rate, the relay shouldn't be storing personal data. 
> 
> Having it encrypted also makes remote management an absolute pain.
> 
> Can someone clarify this?

I am not a lawyer, but I've heard that it helps to prove you have no personal data.
This is harder when there is encrypted data on the machine.

Tim

> -- D
> 
> On 24 October 2016 08:53:14 BST, Petrusko <petrusko at riseup.net> wrote:
> Hey all,
> 
> I'm planning to customise a RPi with Raspbian already running, and using
> cryptsetup (LUKS) to have a partition more secure for some reasons...
> So the goal is to move some existing sensitive folders to this new
> encrypted partition.
> Some sym-links will be used for those directories.
> 
> About Tor, if I'm not wrong, those directories can be moved to this
> encrypted partition :
> /var/lib/tor : so I'm planning to move /var...
> 
> So at final, planning to move :
> /home
> /var
> /tmp
> (why not swap file ?)
> 
> Any suggestions and master's thoughts are welcome :)
> _______________________________________________
> tor-relays mailing list
> tor-relays at lists.torproject.org
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

T

-- 
Tim Wilson-Brown (teor)

teor2345 at gmail dot com
PGP C855 6CED 5D90 A0C5 29F6 4D43 450C BA7F 968F 094B
ricochet:ekmygaiu4rzgsk6n
xmpp: teor at torproject dot org
------------------------------------------------------------------------------










More information about the tor-relays mailing list