Alerts sent to admins and FPF when onion URLs change on landing pages (from monitoring via multiple Tor circuits and physical locations) proposed
MITIG104 · Proposed: Not in place yet. Being considered. · Defined in mitigations.py:270
Tracking: https://github.com/freedomofpress/securedrop-landing-page-checker/issues/4
Threats it mitigates
No threat lists this mitigation.
Possible further mitigation for
| Threat | Status | Risk | After mitigations |
|---|---|---|---|
| Source goes to wrong source interface onion URL THREAT89 | partially mitigated | 9 high | 9 high |
| Landing page source control is compromised THREAT57 | inform | 12 high | 6 medium |
| Landing page host is compromised THREAT58 | inform | 12 high | 6 medium |
| Landing page TLS private key compromised THREAT122 | partially mitigated | 6 medium | 6 medium |
| QUANTUM-like attacks for Landing page THREAT123 | accepted | 6 medium | 6 medium |