Start9/documentation
2
0
Fork 0
mirror of https://github.com/Start9Labs/documentation.git synced 2026-03-30 04:01:59 +00:00
Code Issues Packages Projects Releases Wiki Activity

Maint/nc android tor (#432)

Browse Source 
* Fix NC android tor guide

* Remove 'media' files, add FAQ about tor/clearnet traffic

* forgot this
This commit is contained in:
kn0wmad
2023-07-10 17:57:55 +00:00
committed by GitHub
parent c043c6fd85
commit 26838aab44
6 changed files with 15 additions and 320 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
site/source/support/faq/faq-startos.rst
View File

@@ -80,6 +80,12 @@ Does StartOS only work over Tor? No http or VPN?
-------------------------------------------------
StartOS's current primary communication is over Tor. In many cases we use HTTP over Tor (they are not mutually exclusive), you can see this by navigating to the Tor address in a browser and see the “http” in front of it. A VPN is a feature we're exploring as an alternative to Tor to make things faster without meaningfully impacting privacy. You can also connect directly via LAN if you are on the same network as your device.
Which network traffic travels over tor and which does not?
----------------------------------------------------------
In StartOS versions previous to v040, inbound connections can only be **initiated** over tor. Clearnet (IP) connections can be initiated outbound by the OS (in the case of OS updates or accessing the Start9 Marketplace), or by services (such as by Bitcoin when connecting to the Bitcoin p2p network). In many cases, it is possible to operate **only** via tor by configuring a particular service to do so. For example, in the Bitcoin config, you can "Disable Clearnet" connections, or remove your node from the public network entirely.
Following StartOS v040, powerful and flexible networking configs will be possible across the system.
What if someone gets physical access to my device, can they read the contents? Is it encrypted?
-----------------------------------------------------------------------------------------------
The data is currently encrypted at rest, but not in a way that would prevent a sophisticated attacker from accessing it. This is a step towards better security in the near future. At-rest encryption on servers is a serious challenge, because of the need for remote availability. For example, you may not be at home to enter an encryption password following a power outage, leaving you without access to your server.