-
Notifications
You must be signed in to change notification settings - Fork 336
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add documentation on automatic use of Multihop when DAITA is enabled #7069
Add documentation on automatic use of Multihop when DAITA is enabled #7069
Conversation
5fecf9b
to
3d994b4
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Reviewed 1 of 1 files at r1, 1 of 1 files at r2, all commit messages.
Reviewable status: all files reviewed, 2 unresolved discussions (waiting on @jbjorkang and @MarkusPettersson98)
docs/relay-selector.md
line 16 at r1 (raw file):
for its obfuscating properties, not for any security properties it might have. - DAITA - Short for "Defense against AI-guided Traffic Analysis". A technique supported on some WireGuard relays that makes website fingerprinting more difficult by sending random padding
I may be more future proof to not mention just adding padding packets, e.g. "...that makes fingerprinting more difficult by introducing network noise and making all packets the same size"
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Reviewable status: all files reviewed, 2 unresolved discussions (waiting on @jbjorkang and @Serock3)
docs/relay-selector.md
line 16 at r1 (raw file):
Previously, Serock3 (Sebastian Holmin) wrote…
I may be more future proof to not mention just adding padding packets, e.g. "...that makes fingerprinting more difficult by introducing network noise and making all packets the same size"
Now that you mention it, I don't think we need to define how DAITA works, only what the technique is intended to achieve. What do you think about the following statement:
- DAITA - Short for "Defense against AI-guided Traffic Analysis". A technique supported on some
WireGuard relays that makes website fingerprinting more difficult.
?
3d994b4
to
b182750
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Reviewed 1 of 1 files at r3, all commit messages.
Reviewable status: all files reviewed, 2 unresolved discussions (waiting on @jbjorkang and @Serock3)
b182750
to
b611a5d
Compare
This PR updates
relay-selector.md
to reflect that multihop may be used when DAITA is enabled to select a DAITA-compatible entry relay if needed.TODO
Maybe we should mention that this behavior also overrides multihop since #6996?
This change is