Mandos Keyserver as a TOR Hidden Service

[Vladimir Arseniev]

On 12-04-14 11:41 PM, Fabian Zeindl wrote:

>  this maybe is a wicked idea, but what about hosting the Mandos Keyserver as a hidden service and enabling the mandos clients to connect to the tor-network.
> This way it's virtually impossible to get the actual location of the mandos keyserver, meaning it's way more secure.
> 
> What am i missing?

Two issues come to mind. Getting Tor up in preboot environment would be
nontrivial, I think. But you could use tor2web. Also, Tor circuits
aren't always reliable. If your Mandos clients defaulted to passphrase
prompt, they'd need to be rebooted.