3

Suppose If I am going to use the offshore server for hosting my hidden service .onion domain, then my private keys will be on the remote server. Well, that means the host can impersonate my site or hijack it later. How can I protect the ownership of a hidden service?

Improve this question

1 Answer 1

Reset to default
1

Either host with a company you truly trust it will not steal your private keys, or if you are too paranoid to trust anyone, host your hidden service on your own server. For the latter option, you need a computer connected to the internet, with Tor installed and web server such as Apache (or whatever you need) properly configured with the hidden services .onion domain.

Improve this answer
2
  • And what about encrypting a remote server using LUKS, So the host cannot access the private keys or the site content?
    – Anonymousscum
    Jan 25, 2015 at 18:44
  • Software-based disk encryption methods still have weaknessess, and since it is a remote server, you can't employ a hardware-based encryption. See en.wikipedia.org/wiki/Disk_encryption#Security_concerns for more information.
    – Linostar
    Jan 26, 2015 at 14:16

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .