Skip to content
This repository has been archived by the owner on May 5, 2022. It is now read-only.

Make it harder to identify STREAM packets on the wire #19

Open
emschwartz opened this issue May 8, 2018 · 2 comments
Open

Make it harder to identify STREAM packets on the wire #19

emschwartz opened this issue May 8, 2018 · 2 comments
Labels
enhancement New feature or request

Comments

@emschwartz
Copy link
Member

Ideas for obscuring which transport protocol is being used:

  • Pad packets to the maximum data size by default
  • Randomize the expiry time
  • Use a different connection tag for every packet
  • Use amount tranches (send only increments of 1, 10, 100, etc instead of whatever the connector says the maximum packet amount is)

It's an interesting question whether any of this is worth doing, because connectors can probably figure out which transport protocols (or even which implementations of transport protocols) are being used just by looking at the timing of packets and behavior in response to certain kinds of errors.

@emschwartz emschwartz added the enhancement New feature or request label May 8, 2018
@emschwartz
Copy link
Member Author

More things to consider:

  • How STREAM implementations respond to connector congestion errors
  • Error messages servers return (see 75b9dcd)
  • How implementations ramp up / down packet sizes and number of packets

@emschwartz
Copy link
Member Author

This paper might have some useful ideas: Reducing Metadata Leakage from Encrypted Files and Communication with PURBs

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant