[tor-talk] Question regarding forum software for use as a hidden service

[jason cooper]

Quoting "Fabio Pietrosanti (naif)" <lists at infosecurity.ch>:

> As you know performance is also a key issue of Tor Hidden Services.
>
> So from the performance point of view i suggest to evaluate a Forum
> Software that make as less HTTP requests as possible and provide
> efficient caching in session-data of relevant information in order to
> reduce delay.
>
> -naif

So far the key issues standing out about forum software best suited  
for running a forum as a hidden service is

   * it needs to be easy to security audit
   * low bandwidth requirement (Use of CSS over images)
   * avoid php if possible
   * Developed using best practice to avoid secruity holes (though  
some will most likely exist)

   * Follow best practice for hidden services (e.g. running inside  
virtual machine connecting only through tor.)

Regards,
   Jason.