[tor-talk] Tor advice for web developers

Micah Lee micah at eff.org
Fri Jun 22 19:03:32 UTC 2012


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I will be giving a talk at HOPE called Privacy Tricks for Activist Web
Developers. I was planning on including a section about exit enclaves,
how they work and how to set them up on your server. But then I
discovered that they will be deprecated soon:

https://trac.torproject.org/projects/tor/wiki/doc/ExitEnclave

"Overall the use of enclaves is not advised for these two main reasons:
- - They will not be supported in future versions of Tor (> 0.2.3.x)
- - They do not fit any particular threat model"

So it seems like I should leave this out of my talk.

Is there other advice I can give to web developers and sysadmins who
run websites for activists to make them easier for Tor users to use
securely?

- -- 
Micah Lee
Web Developer - Electronic Frontier Foundation
micah at eff.org - https://www.eff.org/
Join the EFF  - https://supporters.eff.org/join
Follow Me     - https://twitter.com/#!/micahflee
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=lI3K
-----END PGP SIGNATURE-----


More information about the tor-talk mailing list