Obfuscated IPs are not match-able across server restarts

mumble-voip / mumble

Mumble is an open-source, low-latency, high quality voice chat software.

https://www.mumble.info

Other

6.28k stars 1.11k forks source link

Obfuscated IPs are not match-able across server restarts #1311

Closed Kissaki closed 3 years ago

Kissaki commented 10 years ago

The IP obfuscation hashes the IP. Salt is added, which is a random number, assigned each start of the server anew.

Thus, obfuscated IPs are match-able during the runtime of a server instance, but not with another lifetime.

On the other hand, this makes it more secure, one is not able to track users via IP across server sessions - this does require a server restart though to take effect.

@dD0T @mkrautz Shouldn't we just use a persistent salt? Or is there a reason not to?

Krzmbrzl commented 4 years ago

What are IPs obfuscated for?

Kissaki commented 4 years ago

User anonymization, user privacy.

IP addresses are/can be considered personal data under law.

Krzmbrzl commented 3 years ago

Given that this issue is from 2014 and hasn't received any attention whatsoever, I don't think that this actually poses a problem for running mumble servers.

Therefore I'll close this issue for now.