3

Suppose If I am going to use the offshore server for hosting my hidden service .onion domain, then my private keys will be on the remote server. Well, that means the host can impersonate my site or hijack it later. How can I protect the ownership of a hidden service?

1

Either host with a company you truly trust it will not steal your private keys, or if you are too paranoid to trust anyone, host your hidden service on your own server. For the latter option, you need a computer connected to the internet, with Tor installed and web server such as Apache (or whatever you need) properly configured with the hidden services .onion domain.

  • And what about encrypting a remote server using LUKS, So the host cannot access the private keys or the site content? – Anonymousscum Jan 25 '15 at 18:44
  • Software-based disk encryption methods still have weaknessess, and since it is a remote server, you can't employ a hardware-based encryption. See en.wikipedia.org/wiki/Disk_encryption#Security_concerns for more information. – Linostar Jan 26 '15 at 14:16

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.