📆 July 4, 2024 | ⏱️ 2 minute read | 🏷️ journal updates

Journal Update 27: New Onions!

Foreword

This entry does not constitute a return to writing. I’m still taking a step back from writing. I’m only writing this entry because I have to make an important announcement.

What’s New

If you don’t want to read this whole entry, just read the important announcement in the first bullet point of the subheading below.

New Onions And Key Rotation

The new I2P destination private keys are kept offline while the online keys are rotated at regular intervals. This provides compromise recovery. I.e: If my server is hacked and the online keys are stolen, the attacker can only control the I2P destination until the keys expire, and I just keep rotating in new online keys according to schedule as if nothing happened.

Tor doesn’t yet support offline keys, so if the server is compromised I’ll have to generate a new onion. The good news is there are plans to support offline v3 onion service keys in Arti, a project to implement Tor in Rust. As soon as that’s implemented, I’ll move my onion key offline as well.

Reducing Housekeeping

Goodbye Email

Future Plans