1

There are several questions here, 1) maybe I should chop the Question to pieces? All four questions marked with numbers as before.

I am considering to host file server for a company in tor. The idea is to use ownCloud to store confidential information. The address will be given only to the few trusted employees. 2) What worries me is wether the address of my hidden service can be discovered through HS-directory?

Being a sceptic, I wanted to try it myself. I didn't find a ready tool, so I started to examine Stem package. I was able to get the fingerprint of the public key of a random server, but not the public key itself. The fingerprint did not give reasonable address when encoded to base32 and concatenated to 16 chars. Then I read that address is not just a hash of the public key. 3) Apparently information at tor project site is outdated? 4) Could I calculate .onion domain address from a fingerprint or other information I receive from descriptor?

Improve this question
1
  • Question 2 is now practically answered. Although HS directory can not probably do that, a relay can catch onion-addresses. I am still curious wether the fingerprints can be used to deduce the addresses.
    – pekka
    Sep 1, 2015 at 21:17

1 Answer 1

Reset to default
1

your site onion address could be captured by relays on the TOR network, if you want to make it confidential, you should consider making the hidden service "invitation only" or "password protected"

Improve this answer
1
  • OK, I will certainly protect the data with passwords and encryption. The reason for using tor is just to avoid unwanted attention. The users and the server can not easily be correlated.
    – pekka
    Sep 1, 2015 at 21:01

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .