[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #18361 [Tor Browser]: Issues with corporate censorship and mass surveillance
#18361: Issues with corporate censorship and mass surveillance
------------------------------------------+--------------------------
Reporter: ioerror | Owner: tbb-team
Type: enhancement | Status: new
Priority: High | Milestone:
Component: Tor Browser | Version:
Severity: Critical | Resolution:
Keywords: security, privacy, anonymity | Actual Points:
Parent ID: | Points:
Sponsor: |
------------------------------------------+--------------------------
Comment (by cypherpunks):
CAPTCHAs are a fundamentally untenable solution to dealing with DDOS
attacks. Algorithmic solutions will always catch up to evolving CAPTCHA
methods. CloudFlare and other service providers should recognize that is
the inevitable direction technology is going and abandon it now.
An alternate solution is a client proof-of-work protocol. This puts a
greater burden on attackers attempting to establish many connections than
on users who only need one connection. Then once a TLS session is
established, the server can determine from behavior of that client whether
it's an attacker and drop the connection. We should try to standardize
that and get it into TLS implementations so service providers have an easy
configuration choice.
https://tools.ietf.org/html/draft-nir-tls-puzzles-00
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18361#comment:47>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs