Re: [Pearg] Call for adoption: draft-wood-pearg-website-fingerprinting-00

"Christopher Wood" <caw@heapingbits.net> Tue, 21 January 2020 16:32 UTC

Return-Path: <caw@heapingbits.net>
X-Original-To: pearg@ietfa.amsl.com
Delivered-To: pearg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2AE2D1201AA for <pearg@ietfa.amsl.com>; Tue, 21 Jan 2020 08:32:35 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.7
X-Spam-Level:
X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=heapingbits.net header.b=hFv+9x17; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=gaLkuQV/
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Fe2TV5XlzBYP for <pearg@ietfa.amsl.com>; Tue, 21 Jan 2020 08:32:29 -0800 (PST)
Received: from out5-smtp.messagingengine.com (out5-smtp.messagingengine.com [66.111.4.29]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D55471201A3 for <pearg@irtf.org>; Tue, 21 Jan 2020 08:32:26 -0800 (PST)
Received: from compute6.internal (compute6.nyi.internal [10.202.2.46]) by mailout.nyi.internal (Postfix) with ESMTP id 074C722182 for <pearg@irtf.org>; Tue, 21 Jan 2020 11:32:26 -0500 (EST)
Received: from imap4 ([10.202.2.54]) by compute6.internal (MEProxy); Tue, 21 Jan 2020 11:32:26 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=heapingbits.net; h=mime-version:message-id:in-reply-to:references:date:from:to :subject:content-type:content-transfer-encoding; s=fm3; bh=GSLsX vyqKQ/VZGXDYCzEIfPqSWjwqqP8RaK2OBQtxI0=; b=hFv+9x179JhL30dwxKya1 qV/3OUwMC4GiZMXEx/L0+j6hYZjnUfjWXSKGF/NUgyqhxab7FcHWPBWZ/FbdIw5B T2gOI5FF5oQ0oPXyGurbB6iUr3PGbYj/xlXdHvT2xdlWM8WgiWM2RyM+x60eDjId 7RuNK9MEGKE1ZTHlM5RV1FyuFBIvmEpRKSMx1JERRvATSrpwEHUYgzhf9rg4gPPc zAGik8ziHD/vRRDMYSRphUpSZBwA3YxxJPnoP8EH0ZFj+NOKqgbnGEYYVgVaIwKY aStuEFb1c6yERR+1dybBIZ3VZ8Z/LX7wWjAIg9EoVrbZ4AjMbGixE+slAYclLlIG g==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm1; bh=GSLsXvyqKQ/VZGXDYCzEIfPqSWjwqqP8RaK2OBQtx I0=; b=gaLkuQV/bHOAXr29troMpvUm8FVO1jq2gV9gpNjAr8f0M2rQJ+Jv6swgS qYvm7g9N/GivICO4bIL49FMow2JV4uqYHbVfrqEM5ST5ystYRDAEP93AcDfhcPYG YTq+1XkfFV5JRQVDzAo0wnFoUBiczuqf65S/0i28JB+7I4IIpQWDdGFucxV4syPn dhQpT/e9YLBrYp7VRA1y0uFiKy0HoKsZqQfMTQiJ+lUcofRuPUn3/xRQF2JgXY8t 7lsauGN8piFCahAHXIRPh291SlPhglNyASFw7kD6kYEUp2WZNZggGk39mhDCRIHf Inf8LL/o7AL+TQiC3Pip5oOyj/Fgg==
X-ME-Sender: <xms:mScnXgoX-WSbEbvgBF73xgt497bTUw-X3_nNpr3kbMGejF0zvQ6erg>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedugedrudekgdekkecutefuodetggdotefrodftvf curfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfghnecu uegrihhlohhuthemuceftddtnecunecujfgurhepofgfggfkjghffffhvffutgfgsehtqh ertderreejnecuhfhrohhmpedfvehhrhhishhtohhphhgvrhcuhghoohgufdcuoegtrgif sehhvggrphhinhhgsghithhsrdhnvghtqeenucffohhmrghinhepihgvthhfrdhorhhgpd hgihhthhhusgdrtghomhdpihgvvggvkedtvddrohhrghdpihhrthhfrdhorhhgnecuvehl uhhsthgvrhfuihiivgeptdenucfrrghrrghmpehmrghilhhfrhhomheptggrfieshhgvrg hpihhnghgsihhtshdrnhgvth
X-ME-Proxy: <xmx:mScnXsYQIJ24RHF_zNApmngXRs8sBslqG5epI9j8iQ9FdjjDK1K7Ww> <xmx:mScnXsCpb1UMurBqeaRkZIGGIM0YY6HnJ2GXIVYQfwPx_jTt09sbXw> <xmx:mScnXvFdnmsmXNdviMNP8lLOcwFId8b8sffBC1pJ3vaMWHz1Z61_9g> <xmx:micnXkrA2Wzko7Q2tKXH8HMLR-bLBMFaX6nSAIsiFfwU8dTdi2Bokg>
Received: by mailuser.nyi.internal (Postfix, from userid 501) id 8E9B93C00A1; Tue, 21 Jan 2020 11:32:25 -0500 (EST)
X-Mailer: MessagingEngine.com Webmail Interface
User-Agent: Cyrus-JMAP/3.1.7-754-g09d1619-fmstable-20200113v1
Mime-Version: 1.0
Message-Id: <b4c1f751-2e2a-4afb-8441-1befd022f5cd@www.fastmail.com>
In-Reply-To: <8db26e2a-de9f-08bf-e822-ea3093dda7cc@andersdotter.cc>
References: <B33EF781-F4E7-4B09-B0AC-3B39DE181F73@sinodun.com> <8db26e2a-de9f-08bf-e822-ea3093dda7cc@andersdotter.cc>
Date: Tue, 21 Jan 2020 08:32:05 -0800
From: "Christopher Wood" <caw@heapingbits.net>
To: pearg@irtf.org
Content-Type: text/plain;charset=utf-8
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/pearg/D_9EVxY_K7L6_ya1WALXxWjBIgw>
Subject: Re: [Pearg] =?utf-8?q?Call_for_adoption=3A_draft-wood-pearg-website-?= =?utf-8?q?fingerprinting-00?=
X-BeenThere: pearg@irtf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Privacy Enhancements and Assessment Proposed RG <pearg.irtf.org>
List-Unsubscribe: <https://www.irtf.org/mailman/options/pearg>, <mailto:pearg-request@irtf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/pearg/>
List-Post: <mailto:pearg@irtf.org>
List-Help: <mailto:pearg-request@irtf.org?subject=help>
List-Subscribe: <https://www.irtf.org/mailman/listinfo/pearg>, <mailto:pearg-request@irtf.org?subject=subscribe>
X-List-Received-Date: Tue, 21 Jan 2020 16:32:35 -0000

On Tue, Jan 21, 2020, at 2:38 AM, Amelia Andersdotter wrote:
> Hi all,
> 
> I support adoption. Bearing mind Stephen's comments from earlier, there
> may some work already ongoing in IPSecME:
> https://datatracker.ietf.org/doc/draft-ietf-ipsecme-iptfs/

Thanks for raising this, Amelia! I filed an issue to cite it accordingly:

   https://github.com/chris-wood/ietf-fingerprinting/issues/4

Best,
Chris

> 
> Abstract:
> 
> "This document describes a mechanism to enhance IPsec traffic flow
> security by adding traffic flow confidentiality to encrypted IP
> encapsulated traffic.  Traffic flow confidentiality is provided by
> obscuring the size and frequency of IP traffic using a fixed-sized,
> constant-send-rate IPsec tunnel.  The solution allows for congestion
> control as well."
> 
> There's also a project in IEEE 802.1 (well, it's starting up at this
> time) that tries to explore ways of mitigating web traffic
> fingerprinting by ensuring packet length/timing etc. are homogeneous. It
> will be covered eventually here: https://1.ieee802.org/security/
> 
> best regards,
> 
> Amelia
> 
> On 2020-01-13 10:42, Sara Dickinson wrote:
> > Hi All, 
> >
> > A draft called ‘Network-Based Website Fingerprinting' (https://datatracker.ietf.org/doc/draft-wood-pearg-website-fingerprinting/) has been presented twice in PEARG meetings and received positive feedback at IETF 106. This email starts a two week Call for Adoption of this document.
> >
> > Please review this draft to see if you think it is suitable for adoption by PEARG and send comments to the list, clearly stating your view.
> >
> > This call for adoption ends on 27th January 2020.
> >
> > Sara. 
> 
> 
> -- 
> Pearg mailing list
> Pearg@irtf.org
> https://www.irtf.org/mailman/listinfo/pearg
>