sohle

3 ms·

1. 1.▲
   by sohle 3y ago

   This is a great explanation, and the point about TLS is well taken as well. If you want to go for that level of misdirection, then depending on your threat model you might consider e.g. using a remote proxy and wrapping your session to it i
2. 2.▲
   by sohle 3y ago

   Hi, I wrote this post, and I just wanted to say thanks for the kind words - this research was a lot of fun to do and I'm glad it has an audience. The "best" resources I know of are the ones I cited in that post, though do bea
3. 3.▲
   by sohle 3y ago

   Hi, I wrote this post, and yes, you're right that IPs would be disclosed, because it is necessary to learn a remote peer's IP before you can make a TCP connection to them. Whether or not this is "secure" depends on who y
4. 4.▲
   by sohle 3y ago

   Hi, I wrote this post, and this is something I was wondering about the whole time. It seemed like TCP was a necessary compromise, but I wasn't sure how painful the overhead would be. If there are any notable examples you know of where
5. 5.▲
   by sohle 3y ago

   Hi, I wrote this post. Let me use your comment as a chance to talk about what I was going for with the use of Noise here. You're correct that part of the assumption inherent in end-to-end encryption is that you've got the other en