Assuming that I run a Tor relay on a virtual private server running linux, are there any good practices to keep my relay's private key safe?

We can take for granted that software packages constantly get updated and upgraded and that ssh access is restricted to ssh keys.

Should I use an encrypted loopback device to encrypt the private key? Are there any other attack vectors I should have in mind ?

closed as off-topic by Sam Whited, Emii Khaos, Jens Kubieziel, Neil Neyman, Philipp Winter Sep 26 '13 at 16:42

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "This question does not appear to be about Tor, within the scope defined in the help center." – Sam Whited, Emii Khaos, Jens Kubieziel, Philipp Winter
If this question can be reworded to fit the rules in the help center, please edit the question.

  • 3
    This seems like it would be more useful on the Security SE site; it's not really specific to Tor (just the fact that his Linux server happens to be running a Tor relay). – Sam Whited Sep 25 '13 at 21:55
  • Well one the one hand you're right, but there are Tor's specific security matters, such as how to protect your relay's private key. – alaf Sep 25 '13 at 23:12
  • 1
    If that's what's being asked, the qustion should be updated to reflect that. As is it's too broad and/or off topic (it sounds offtopic anyways). – Sam Whited Sep 25 '13 at 23:23