Qubes Isolation Best Practices?

General Discussion
20

Thanks,

On that note, I posted this the other day

https://forum.qubes-os.org/t/identification-method-for-torr-over-vpn-anonymous-network-flow-and-service-type-thereof/42413/1

So you think chaining is better? Do you think that for example:

(eveything chained)

Sys-net ← f/w ← VPN1 ←  Identity 1 (Identifiable qubes ie personal email, banking,etc)

        <- f/w   <- VPN1     <- Whonix  <-  VPN2 or Proxy -<-Identity 2

Would be better than :

Seperated:

Sys-net ← fw1 <-VPN1 <-Identity 1

Sys-net   ← fw2 ← sys-whonix /tor ← tor browser

Sys-net   ← fw3 ← VPN2 - Identity 2

(Sorry I am no good at doing this diagrams)

1 Like
Public/Anonymous Compartmentalization