Re:ProtonMail Voluntarily Offers Assistance for Real-Time Su...
by LinuxBender on Wednesday May 29, 2019 @12:59PM
(#20042596)
Long time user of Linode. I assume like any other provider, they would be obligated to make a best effort to obtain forensic data. i.e. logs from your ext4 filesystem. If you use a raw disk and encrypt it, then I assume they would live-snapshot your VM (they can live migrate them) and dump memory contents. Some of the lower-end VPS providers do not have live migrate capabilities (or at least, don't have an easy way to use them in their tooling).
It is your call how long you save/enable logs and if you save them to tmpfs and encrypt your swap. You can also encourage your users to 7-zip encrypt sensitive contents. You can also add specific MX routes in transport maps to use VPN connections to make connection logging less useful. Tinc (open source VPN) is great for this, as traffic routes in user-space through your mesh and therefor traffic can end up at its destination without a direct connection.
It is your call how long you save/enable logs and if you save them to tmpfs and encrypt your swap. You can also encourage your users to 7-zip encrypt sensitive contents. You can also add specific MX routes in transport maps to use VPN connections to make connection logging less useful. Tinc (open source VPN) is great for this, as traffic routes in user-space through your mesh and therefor traffic can end up at its destination without a direct connection.