5 ms·
> to understand whether an adversary can deduce the websites a user is trying to connect to, using a set of IP addresses originating from the user’s device alon
by walrus01 5y ago
> to understand whether an adversary can deduce the websites a user is trying to connect to, using a set of IP addresses originating from the user’s device alone.
If you as a residential broadband singlehomed user in, let's say, China, have all of your traffic going through an advanced DPI system run by an authoritarian state, they absolutely can correlate your activity on a number of metrics and statistical methods even if the crypto for end-to-end transport of your content is flawless.
- rafale 5y agoEven with a VPN and encrypted DNS?
- jerzyt 5y agoYou can ask the question at little differently. The authoritarian state may not care about most sites, but they do care about a few selected sites which they consider "subversive." By monitoring the traffic at both ends, they could potentially correlate packet timestamps, and infer your IP without directly tracing it. Kind of like Shazam for dictators.
- bawolff 5y agoTypically most people would not use a vpn where both ends are in the same authortarian country. Which there may still be other side channels, and other things, but the naive version of that attack sounds a little unlikely.
- bawolff 5y agoMaybe, but the article was asking the question of what someone not doing DPI can glean.