[Strint-attendees] Some low-hanging fruit

lynX@we.were.webeteer.pages.de Fri, 28 February 2014 17:26 UTC

Date: Fri, 28 Feb 2014 18:26:47 +0100
From: lynX@we.were.webeteer.pages.de
To: strint-attendees@lists.i1b.org
Message-ID: <20140228172647.GA20914@lo.psyced.org>
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-15"
Content-Disposition: inline
User-Agent: Mutt/1.5.20 (2009-06-14)
Subject: [Strint-attendees] Some low-hanging fruit
Precedence: list

- Disable unencrypted usage of any protocols
  that may contain privacy relevant content.

- Don't ask third parties for getting at the
  public keys. Don't use hosts files either.
  Just use a suitably elaborate DHT technology
  like the GNU Naming System.

- Protect transaction metadata by throwing
  serious amounts of relay hardware at
  suitable onion/pk routing technologies.

- Think of regionalized onion routing. If
  the relay network is heterogeneous within
  a country or a region of a country, then
  it's not necessary to build circuits around
  the planet - thus the latency is no longer
  an issue.

And an addendum to the threat model:

Don't forget the PRISM scenario. The entire day
we have been talking about things that wouldn't
be able to do anything about that. We need reasons
and motivation for people to not throw their lives
on dangerous servers. And it's not a hopeless 
challenge at all.


-- 
	    http://youbroketheinternet.org
 ircs://psyced.org/youbroketheinternet

[Strint-attendees] Some low-hanging fruit lynX