I read about the Silk Road incident and wondered if it's possible for Tor to have "p2p hosted" hidden services. If that was the case, the FBI wouldn't be able to locate a specific server that hosted silk road.

I would like to create a PoC, but I'm not completely sure if it's theoretically possible to create and safe enough to use a Stateful, Serverless Web Application so I'd like to run it by this forum.

Hosting static (html,css,etc) files would be the easy part; it's exactly like p2p file sharing, but

• how could it be possible for clients to execute the application code (if it's not javascript)?

  • the client would have to setup an environment unless Tails becomes the new Tor bundle. Also, the app code may find your real IP. Can that be stopped?

• how can the web application hold stateful information for users?

  • My guess would be to encrypt all data with PGP and store all encrypted data in SQLite database that may be hosted in clients' computers.

• can data be tampered by one of the many clients hosting the web service?

  • the web service's application logic can be reverse engineered and patched by an attacker. Could a md5sum hash resolve this issue?

• is it possible for Tor to support the load balancing?

  • I read in the forum that Tor doesn't load balance. Is it possible for Tor to support p2p-like web service?

• how can the website be updated by the developer?

  • with private key I suppose, but I'm still having trouble of exactly how the process will work.

• is there any other problem that I'm not aware of?

Kindest Regards

I read about the Silk Road incident and wondered if it's possible for Tor relays to physically host services and distribute the load of executing the service across the network, while the service and the operator's identity remain anonymous.

That way, the service is decentralized and does not lead to the person's real identity.

I would like to create a PoC, but I'm not completely sure if it's theoretically secure enough to accomplish this, so I'd like to run it by this forum.

Hosting "web" hidden services with static files (such as html, css, js, etc) would be the easy part; it's exactly like p2p file sharing, but

how could it be possible for Tor relays to execute the application code?
how can the web application hold stateful information for users?
can data be tampered by one of the many clients hosting the web service?
is it possible for Tor to support the load balancing?
how can the website be updated by the developer?
is there any other problem that I'm not aware of?

Kindest Regards

I read about the Silk Road incident and wondered if it's possible for TOR to have "p2p hosted" hidden services. If that was the case, the FBI wouldn't be able to locate a specific server that hosted silk road.

I would like to create a PoC, but I'm not completely sure if it's theoretically possible to create and safe enough to use a Stateful, Serverless Web Application so I'd like to run it by this forum.

Hosting static (html,css,etc) files would be the easy part; it's exactly like p2p file sharing, but

• how could it be possible for clients to execute the application code (if it's not javascript)?

  • the client would have to setup an environment unless tailOS becomes the new TOR bundle. Also, the app code may find your real IP. Can that be stopped?

• how can the web application hold stateful information for users?

  • My guess would be to encrypt all data with PGP and store all encrypted data in SQLite database that may be hosted in clients' computers.

• can data be tampered by one of the many clients hosting the web service?

  • the web service's application logic can be reverse engineered and patched by an attacker. Could a md5sum hash resolve this issue?

• is it possible for TOR to support the load balancing?

  • I read in the forum that TOR doesn't load balance. Is it possible for TOR to support p2p-like web service?

• how can the website be updated by the developer?

  • with private key I suppose, but I'm still having trouble of exactly how the process will work.

• is there any other problem that I'm not aware of?

Kindest Regards

I read about the Silk Road incident and wondered if it's possible for Tor to have "p2p hosted" hidden services. If that was the case, the FBI wouldn't be able to locate a specific server that hosted silk road.

I would like to create a PoC, but I'm not completely sure if it's theoretically possible to create and safe enough to use a Stateful, Serverless Web Application so I'd like to run it by this forum.

Hosting static (html,css,etc) files would be the easy part; it's exactly like p2p file sharing, but

• how could it be possible for clients to execute the application code (if it's not javascript)?

  • the client would have to setup an environment unless Tails becomes the new Tor bundle. Also, the app code may find your real IP. Can that be stopped?

• how can the web application hold stateful information for users?

  • My guess would be to encrypt all data with PGP and store all encrypted data in SQLite database that may be hosted in clients' computers.

• can data be tampered by one of the many clients hosting the web service?

  • the web service's application logic can be reverse engineered and patched by an attacker. Could a md5sum hash resolve this issue?

• is it possible for Tor to support the load balancing?

  • I read in the forum that Tor doesn't load balance. Is it possible for Tor to support p2p-like web service?

• how can the website be updated by the developer?

  • with private key I suppose, but I'm still having trouble of exactly how the process will work.

• is there any other problem that I'm not aware of?

Kindest Regards