If it's only on the backend, a timing attack could still potentially estimate whether particular content is already on the system. Protection against subtle ti

If it's only on the backend, a timing attack could still potentially estimate whether particular content is already on the system. Protection against subtle timing attacks on deduplication is difficult.