SecureDrop has default (but potentially customizable) text on source interface with post-Tor OPSEC information proposed
MITIG85 · Proposed: Not in place yet. Being considered. · Defined in mitigations.py:203
Threats it mitigates
No threat lists this mitigation.
Possible further mitigation for
| Threat | Status | Risk | After mitigations |
|---|---|---|---|
| DNS requests to news organization's subdomain for SecureDrop landing page, freedom.press, torproject.org Tor activity, SD submissions may be correlated THREAT73 | inform | 12 high | 9 high |
| Source reveals that they are using securedrop/leaking documents THREAT76 | partially mitigated | 9 high | 6 medium |
| Source activity is compromised via physical surveillance (e.g.: camera) THREAT131 | partially mitigated | 6 medium | 6 medium |
| Source searches for SecureDrop on search engines THREAT156 | accepted | 4 medium | 4 medium |