globaleaks/GlobaLeaks — Issue #90: Torify
Author: ioerror
Created: 2011-10-16 18:09:30+00:00
State: open

I propose that we torify all of the GL services in a two tiered fashion.

The first is that GL itself should be Tor aware and make connections through Tor for any outgoing connection - they should have a username and password to ensure that separate streams/circuits are always used.

The second is that each platform must use a firewall that ensures two properties which are expected for all GL services - the first is that it fails closed - no packet leaves the box from GL unless through Tor, the second is that it automatically routes packets through Tor in a transparent manner. If Tor breaks or stops working, it should fail closed and alert the node maintainer.