3 ms·

Note that DP-3T and PEPP-PT are both privacy "preserving" protocols. They make different trade-offs between threat models and ultimate levels of privacy, but th

Note that DP-3T and PEPP-PT are both privacy "preserving" protocols. They make different trade-offs between threat models and ultimate levels of privacy, but these are both vast improvements over the pervasive centralised geolocation data collection used in China and South Korea. I think DP-3T is the better choice, and Germany has clearly come to that decision as well (helped, no doubt, by the fact that this is the protocol that will receive API support) but I think it is reasonable to come to the conclusion that PEPP-PT is better.

temac 6y ago
Depends from who you want to be kept private. I've a hard time describing PEPP-PT "privacy preserving" the same way as DP-3T, especially as far as the central server is concerned and the blind trust I must put in it, but I admit this is still better than China like solutions. As for the trade-offs concerning privacy, it is true that DP-3T is not perfectly more private than PEPP-PT from a theoretical point of view (and nor the inverse), but this concern seems weird from a practical point of view and I have a hard time figuring out practical attacks doable against the public with DP-3T but not with PEPP-PT that would not be the sign of far worse problems...