I have a friend who is hosting some data one will be able to download from a server using two methods:
- Using an app that they will first have to download onto their mobile device
- Accessing the website directly
However, there's two important considerations for the data: it is very sensitive in that he doesn't want any "middle man" to be able to tell who got the data or where it came from (from server / ISP logs, etc...). It should also be accessible when visitors have extremely limited bandwidth around the world. The data should be publicly accessible, and easy to get by the people who know about its existence.
The ultimate goal here is to protect the visitor, so that middle men can't tell what content the visitor has requested, or from where he/she requested it. Basically, we want, as the title says, an untrackable webserver.
To help hide the web-site's identity from the middle man's logs, as well as to help protect the individual requesting the data, I'm thinking that one solution would be to build out several geographically-dispersed proxy servers that tie into a service like No-IP.com. I think it would also be good to somehow encrypt the data from point A to point B (something beyond simple SSL).
Coding considerations aside I'm wondering how you guys would go about achieving this type of security in the server & network side of the project.
Does my idea of using a service like no-ip.com, with a number of different proxy servers globally make any sense?
PS: I realize that some things in this post are vague. Unfortunately, I can't give any specifics as to what the data is, or why we need such a secure infrastructure - for the same exact reason that we need it at all. If you have concerns or questions, please feel free to reach out to me directly.