What is the best thing to do? Bridge protection question

Support Relay Operator
1

Hi onions, I was thinking about a problem (perhaps it would be more appropriate to talk about a doubt and not a problem) that I am having.

I have created a bridge but with the intent to protect it I have decided to encrypt the disk with a password that I am asked for when I boot the computer. This decision is because if someone steals the computer they cannot get the private key and nothing else the bridge will protect the users who will use it.

But since in the meantime I have enabled auto-update (with also the auto-reboot option) I often find that the computer reboots and is paused while it waits for the disk password.

So the question is, what is the best choice?

To avoid this problem I think the best choice is to export the keys, format the computer, remove all passwords, and turn on automatic update again.

But what could happen if the computer is stolen? Are there any other related risks? Is it more important to ensure the stability of the bridge or the security of the related private key?

What do you think might be the best practice?

2

Full encryption can be avoided to some degree. Offline key management could be an alternative practice.

3

Basically it is good to have a backup to notify the network of the possible breach of that bridge due to theft or unauthorized exfiltration of data…eliminating encryption systems that limit the work allow optimal use of the node as long as it lasts (maybe forever) and when there is even the slightest doubt that it has been compromised you knock it down and create a new one.

In the end you lose the reputation of the node but the goal is still achieved and then we are talking about borderline situations, I don’t think it is even fair to think that the problem/doubt described can be considered a frequent event.

It is simply a bit strange in that one might go so far as to assume that it is better to have no protection than to have protection. Certainly this is unusual.