lexicon0

Why would I pay at least 450 euro per month for something I have to run myself? I appreciate that support and maintenance costs are certainly something to pay for, but a high monthly charge when I'm taking all the risk, and paying for the hosting immediately turns me off.

Especially considering the 4 hour SLA on phone support for the enterprise version. If the password management system is down, work stops. I'd rather not have to break the glass on the emergency god account at all.

> Also I'm a bit confused by your stance given the realities of encryption. Does your network strictly block all outbound traffic that it can't actively MITM? If not, a nefarious employee could proxy their criminal (Tor or other) traffic through an external machine that they controlled. In fact this would be the obvious thing to do as visiting an HTTPS (apparently) website on a personal device would seem much less likely to arouse suspicion.

Yes - with some exceptions (lunch break facebook/youtube etc)

I'm adding my thought that hosting a website on Tor primarily, will make it totally unavailable from many workplaces. Currently, Tor is not the place for a site that doesn't _require_ an extremely high level of anonymity of access.

The network policy does ban all personal devices, in order to control what connections originate from inside the network.

To be clear, I'm not demonizing Tor or Tor users. I like what the Tor project wants to do, and I support it, but believing it will be allowed in many corporate settings, in July 2020, is extremely naive. As I already mentioned, there's no legitimate use case to allow this in a corporate setting.

Financial services, but I suspect any business that provides hardware & software to it's employees would take the same view.

There is no legitimate use for it in this context, and as such, every single instance of it has been associated with a crime, mostly CSAM.

I'm in charge of a security for a reasonable sized company. I generally support the Tor project and the goals of having a surveillance free internet.

However - if an employee would install tor browser or use tor on a company device, or a device attached to the company network, they would be fired immediately. I would then refer them to law enforcement after conducting a forensic audit.

Should you make your site only available via onion routing, or primarily available on onion routing, all workplaces will immediately block access and look at anyone who accesses with great incredulity

I wonder how many other 5000+ employee companies that develop their own remote access software have an entire separate redundant system..