Re: [Masque] MASQUE detection through tracking trackers

Töma Gavrichenkov <ximaera@gmail.com> Tue, 05 November 2019 21:32 UTC

Return-Path: <ximaera@gmail.com>
X-Original-To: masque@ietfa.amsl.com
Delivered-To: masque@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 77A4C120BD2 for <masque@ietfa.amsl.com>; Tue, 5 Nov 2019 13:32:39 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level:
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id j84LRl4NiEv7 for <masque@ietfa.amsl.com>; Tue, 5 Nov 2019 13:32:37 -0800 (PST)
Received: from mail-yw1-xc34.google.com (mail-yw1-xc34.google.com [IPv6:2607:f8b0:4864:20::c34]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C953D12095B for <masque@ietf.org>; Tue, 5 Nov 2019 13:32:36 -0800 (PST)
Received: by mail-yw1-xc34.google.com with SMTP id y64so6004851ywe.3 for <masque@ietf.org>; Tue, 05 Nov 2019 13:32:36 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=YVKS2U35ZhN6nEBDfO9ZS/CpQShvNzAj/+HFUZ8zVbc=; b=XTXgc4JYo9dDSvppIL5vH5RYmHhsUF/iZoAnez6DHR862PKjuiq4DpU+EZjwxPAdr1 TcmkfnRDQIi4DXOH47nbO3iBtPNIFd8+xqIODxpjecv0D4Y9sosrjwRTQDmm2ZOuVRUA pyQsdQ6VA+TGJQrmOA4+bD2xx+6BDKXMQVrhQrnb33FuKuntHQkKQOjrFmuMbpOoFHXa EFJ89SGSjgRnYYnKpcQWNjnBeRT/2ynvi785FuQ8Ko9cNyYtD9D3uD2izQhhHVHpQVat PE7GNJm3AVOEAdNbpRwY7yVLy1eI9NVhYpVcKdoUxBYzaHcuh1bAQ8DKmPsqRwUWs6b4 tDmQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=YVKS2U35ZhN6nEBDfO9ZS/CpQShvNzAj/+HFUZ8zVbc=; b=o+ZKI0jr4kT1/axmA5VES4f73rGGde7ft1fUjM/B41wk//SbRWahLZMKKD3OReto1j uY1N7BMGZSiaCnpuG3RGVAWYScb0qnWX1b+ULn6EAiLdZSHuUEAftiX1xpQjXvJTUssN iuICx+bj2eaWmtgMYwPZIpicc0v+B2oFCJ9GFmkWP5VreKFZlz326iTysBc4xIDg/qIH TjzSyi/Nuss3u3Z2eni1+VJyvGPmrrGW0wSJHG5kaXfDS8o2P+cdkTxS+VndsqeYawpW vka89PMqGkjcIkoRnX8hpi+Vdvc90EAWUuWE/+slQ4vatHAxXbcGLrty1SGbJRtrWLEZ vRnQ==
X-Gm-Message-State: APjAAAWBkCyVKs8LK8OHfNixsevwPHx/Cb8hjvdfT9LLcp9BT07c4OmH 0Px4vPar+Nz4irjnU7hKtpKHdWIBk70Yl5dq8YI=
X-Google-Smtp-Source: APXvYqwX8Uvd+B366tEo1OE5R6rsRbkNmXBpSRcENFhnC8+/s5XWzNXBnc38Eopa92CBcWRpD4pkQQMT9gylr6l5TKU=
X-Received: by 2002:a0d:d701:: with SMTP id z1mr24576360ywd.430.1572989555428; Tue, 05 Nov 2019 13:32:35 -0800 (PST)
MIME-Version: 1.0
References: <CALZ3u+Yd3wu3G2o-AJErNw6SSgU97F-osJfJhYaiuu5Sb9sF6g@mail.gmail.com> <CA+9kkMAbwCTfMb8Z-meqjuuqSGqR+E9OOe8EF1QpeTwAQj4ktA@mail.gmail.com>
In-Reply-To: <CA+9kkMAbwCTfMb8Z-meqjuuqSGqR+E9OOe8EF1QpeTwAQj4ktA@mail.gmail.com>
From: Töma Gavrichenkov <ximaera@gmail.com>
Date: Wed, 06 Nov 2019 00:32:23 +0300
Message-ID: <CALZ3u+Yx8ftsr2-gOF3HA7ArGRCbafgX3GKxdXPJ4b7LR7jppg@mail.gmail.com>
To: Ted Hardie <ted.ietf@gmail.com>
Cc: masque@ietf.org
Content-Type: multipart/alternative; boundary="000000000000afd2330596a02b7f"
Archived-At: <https://mailarchive.ietf.org/arch/msg/masque/f0YpXmD0jGDmCBI_WASh06hsT8c>
Subject: Re: [Masque] MASQUE detection through tracking trackers
X-BeenThere: masque@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Multiplexed Application Substrate over QUIC Encryption <masque.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/masque>, <mailto:masque-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/masque/>
List-Post: <mailto:masque@ietf.org>
List-Help: <mailto:masque-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/masque>, <mailto:masque-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 05 Nov 2019 21:32:40 -0000

Peace,

On Tue, Nov 5, 2019, 8:15 PM Ted Hardie <ted.ietf@gmail.com> wrote:

> The box you've described is fundamentally a traffic analysis tool.  From
> the business perspective, it's likely a subscription service
>

I skipped that before, yet I think I have to say this: in the today's
world, every DPI middlebox (worth ordering by whoever willing to make any
profit on top of that) has this subscription service.  As has been rightly
pointed out in this thread before, this is now an arms race, and we should
expect the device to be updated on a weekly basis at least, and every maybe
other hour at worst, or even worse.

--
Töma

>