Christian Huitema <huit...@huitema.net> writes:
 
>Defeating fingerprinting is really hard. It has been tried in the past, as in
>"make me look like Skype" or "make me look like wikipedia". The idea is to
>build a target model, then inject enough noise and padding in your traffic to
>match the target model. But that way easier to say than to do!

As Yuri Totrov, a.k.a the shadow director of personnel at the CIA, showed:

https://mindmatters.ai/2018/11/how-the-kgb-found-cia-agents/

the only way to hide A as B is if you become B.  Which means you can't be A
any more.  There was a paper that looked a traffic morphing published a year
or two ago that came to the same conclusion, to look like you're Skype or a
SIP VoIP call you need to actually be Skype or a SIP VoIP call.

Peter.


_______________________________________________
TLS mailing list
TLS@ietf.org
https://www.ietf.org/mailman/listinfo/tls

Reply via email to