Mitro Hosting Situation

[Immortalin]

Hi, 

As of 28/2/2015, what is the current hosting situation for mitro? When do we have to move to self-hosting?

Thanks in advance for all the hard work!

[Evan Jones]

Short summary: If you need something rock solid and supported, I suggest paying someone else such as Lastpass, 1Password, or Dashlane.

Long story: we are still paying for running the service (total cost: about ~$600/month to AWS and Google Cloud), but its not clear how much longer this will continue. At this point it seems likely that we will need to shut it down this calendar year. :(

The AWS/Google cost is not really the problem. The killer part is that it takes about ~1-2 hours a week of my time every week to answer some support emails. Then once every few months it seems to require some more serious time commitment to debug random technical issues. (e.g. migrating an instance, rebooting something, figuring out why we filled a disk). These issues are really the killer part, and we haven't figured out a way to hand this part off to someone in a way that makes us comfortable.

--
You received this message because you are subscribed to the Google Groups "Mitro developers list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to mitro-dev+...@googlegroups.com.
To post to this group, send email to mitr...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/mitro-dev/81c6d45b-3e51-43f9-8908-78e6cdd081d6%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Immortalin]

Hi Evan,

Thank you for your reply.

I am averse to using 1Pass and the like mainly due to privacy concerns, which is why I am interested in self-hosted solutions. Just wondering, is there any plans for porting mitro to Golang? The goagent branch seem to be used for testing purposes only. I am not much of a Java dev but I think it would make self hosting easier if there can be a Golang port of the server. The result would be a single compiled statically linked executable without the need for external dependencies. Pair it with an encrypted SQLite embedded database with the master decryption password hardcoded in the executable by the user during compile time and it would be perfect. The encrypted SQLite file can be stored in Dropbox or Google drive and all the user need to do is to set the executable to run whenever Chrome is started via the OS's built in event scheduler. All that is left is to point the extension to local host, what do you think?

[Bri Hatch]

On Wed, Mar 4, 2015 at 5:58 AM, Immortalin <hitech...@gmail.com> wrote:

> I am averse to using 1Pass and the like mainly due to privacy concerns, which is why I am interested in self-hosted solutions. Just wondering, is there any plans for porting mitro to Golang?

I think the mitro devs are not looking to iterate on mitro any more,
but would welcome others taking it up.

As such, code talks - make it happen, and I bet some git pull requests
would be happily accepted.

My company, lacking java background, isn't able to do any dev on
existing mitro, and are reluctantly looking at other solutions now.


--
Bri Hatch, Systems and Security Engineer. http://www.ifokr.org/bri/

I have a deep and profound love for this new licensing set
up. I get all misty even writing about it.
--matt

[Evan Jones]

Yeah, Bri basically has it right :( Sadly that is the way these things work sometime. I keep it limping along, but it is a volunteer effort at this point.

Evan

> --
> You received this message because you are subscribed to the Google Groups "Mitro developers list" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to mitro-dev+...@googlegroups.com.
> To post to this group, send email to mitr...@googlegroups.com.

> To view this discussion on the web visit https://groups.google.com/d/msgid/mitro-dev/CAE32uS55gnqtdSmJjhxrcXGRPfEvmfPeaG7Ce0F_QQbTLEwxZA%40mail.gmail.com.

[Nathan Craike]

Are there any staff at the EFF who would be willing (and able) to take over the support and server admin?

[Immortalin]

Hi, I won't mind taking over Mitro.

[Nathan Craike]

On Monday, 13 July 2015 12:31:19 UTC+10, Immortalin wrote:

Hi, I won't mind taking over Mitro.

The problem is, anyone taking over all of Mitro would have to be someone who the current Mitro userbase trusts. It would probably have to be an organisation, not just one person, and an organisation which is well-known and has a proven record on privacy, information security, and administering infrastructure which facilitates those things.

This is why I suggest the EFF. I also thought they expressed some interest in running things late last year, but it sounds like that didn't come through? Okay, but I think it would have to be the EFF or a similar well-known and trusted organisation. Otherwise it's just the Mitro team handing over control to some unknown third party.

[Roland Siegbert]

On Monday, July 20, 2015 at 2:25:52 AM UTC+2, Nathan Craike wrote:

On Monday, 13 July 2015 12:31:19 UTC+10, Immortalin wrote:

Hi, I won't mind taking over Mitro.

This is why I suggest the EFF.

Anybody asked the EFF actually?

Else, I would start to think about writing a "How to self-host Mitro" blog entry as  the end is near.

Thanks to Vijay Pandurangan and all the others involved in Mitro for this great solution! 👍

[Vladan Čolović]

Has anybody wrote that "How to self-host Mitro" blog post?
Or should I switch to alternatives? If there are any.

[Winston Hong]

We have deployed Mitro with enhanced security protection on the self-hosting QA server this week. 

Once idQ-Mitro passes the QA process, idQ-Mitro will open to the public. 

idQ Connect has been used to log in to Wi-Fi hotspot in Asia.

idQ Connect will be used to log in to the idQ-Mitro server.

https://play.google.com/store/apps/details?id=com.inbay.idqconnect&hl=en

https://itunes.apple.com/us/app/idq-connect/id896295951?mt=8

You can follow the blog post  "How to self-host Mitro" below to build your own Mitro server. 

https://www.hashtagsecurity.com/mitro-login-manager-on-premise-2/