Re: [Pearg] Call for adoption: draft-wood-pearg-website-fingerprinting-00

[Amelia Andersdotter <[e-mail]>]

Hi all,

I support adoption. Bearing mind Stephen's comments from earlier, there
may some work already ongoing in IPSecME:
https://datatracker.ietf.org/doc/draft-ietf-ipsecme-iptfs/

Abstract:

"This document describes a mechanism to enhance IPsec traffic flow
security by adding traffic flow confidentiality to encrypted IP
encapsulated traffic.  Traffic flow confidentiality is provided by
obscuring the size and frequency of IP traffic using a fixed-sized,
constant-send-rate IPsec tunnel.  The solution allows for congestion
control as well."

There's also a project in IEEE 802.1 (well, it's starting up at this
time) that tries to explore ways of mitigating web traffic
fingerprinting by ensuring packet length/timing etc. are homogeneous. It
will be covered eventually here: https://1.ieee802.org/security/

best regards,

Amelia

On 2020-01-13 10:42, Sara Dickinson wrote:
> Hi All, 
>
> A draft called ‘Network-Based Website Fingerprinting' (https://datatracker.ietf.org/doc/draft-wood-pearg-website-fingerprinting/) has been presented twice in PEARG meetings and received positive feedback at IETF 106. This email starts a two week Call for Adoption of this document.
>
> Please review this draft to see if you think it is suitable for adoption by PEARG and send comments to the list, clearly stating your view.
>
> This call for adoption ends on 27th January 2020.
>
> Sara.