search

cocasse / phantom

Automatically exported from code.google.com/p/phantom
Other
0 stars 0 forks source link

Potentially support datagram protocols without UDP transport #9

Open GoogleCodeExporter opened 8 years ago

GoogleCodeExporter commented 8 years ago 
I fully understand that using anything other than standard TLS/SSL would make 
it easier for the protocol to be fingerprinted and potentially blocked. 
FOrtunately, another project with a completely different aim has already worked 
on the idea of transporting unreliable message-based protocols efficiently on 
top of reliable stream-based protocols including TLS/SSL, without making it 
possible to dinstinguish such behavior by means other than traffic flow 
analysis. I recommend looking at http://dedis.cs.yale.edu/2009/tng/ - 
especially their paper "Minion: Unordered Delivery Wire-Compatible with TCP and 
TLS" and the drafts "Improving OpenSSL to Process Out of Order Data" and 
"Unordered Delivery in TLS-Encrypted Connections".

Original issue reported on code.google.com by Eternal...@gmail.com on 6 Mar 2012 at 7:06

GoogleCodeExporter commented 8 years ago 
I will note, however, that there may still end up being problems with this 
since you will end up with doubled congestion control, which behaves... badly. 
DTLS is really the only way to solve that, asd it *is* distingushable from 
standard TLS.

Original comment by Eternal...@gmail.com on 6 Mar 2012 at 8:13

GoogleCodeExporter commented 8 years ago 
A potential solution may be to adopt the TNG architecture more throughly, which 
could provide other benefits. It's a rather neat concept, and the main reason 
it is unlikely to be widely deployed on the public internet is due to legacy 
concerns, which are less of an issue here.

Original comment by Eternal...@gmail.com on 6 Mar 2012 at 8:17