Opened 7 years ago

Last modified 6 weeks ago

#6932 new enhancement

Implement some HTTPOS features in TBB

Reported by: mikeperry Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: SponsorZ, tbb-firefox-patch
Cc: g.koppen@… Actual Points:
Parent ID: #7027 Points:
Reviewer: Sponsor:

Description

http://freehaven.net/anonbib/cache/LZCLCP_NDSS11.pdf lists several hacks that can be done at low cost to defend against website traffic fingerprinting. Not all of them are easy for TBB: some involve TCP/iptables hacks. However, others are relatively simple and include things like randomizing the accepted encoding, asking for ranges in parallel, issuing dummy pipeline requests, and so on.

Child Tickets

Change History (7)

comment:1 Changed 7 years ago by gk

Cc: g.koppen@… added

comment:2 Changed 7 years ago by mikeperry

Keywords: SponsorZ added
Parent ID: #7027

comment:3 Changed 5 years ago by erinn

Keywords: tbb-firefox-patch added

comment:4 Changed 5 years ago by erinn

Component: Firefox Patch IssuesTor Browser
Owner: changed from mikeperry to tbb-team

comment:5 Changed 3 years ago by cass

Severity: Normal

This ticket is tagged SponsorZ, but it looks like the need might be being addressed through current work and/or other tickets. Is this still a thing that needs funding?

comment:6 Changed 4 months ago by cypherpunks

still worth doing.

comment:7 Changed 6 weeks ago by cypherpunks

HTTPOS would allow better load balancing, asking for ranges in parallel. Is there any public source f the code/ tor patch they used to review or try?

would love to check this work out that they have already done.

i have tried "MitM" for socksport for benchmarking with proxy chained, asking for ranges in parallel and usually gives you better throughput. But this requires additional requests and latency is almost high. so only files above 1MB perform better but no smaller because overhead latency as i noticed in test scenario.

multipath circuit to exit should also work :)

Note: See TracTickets for help on using tickets.