💾 Archived View for rawtext.club › ~sloum › geminilist › 006031.gmi captured on 2023-11-14 at 09:39:37. Gemini links have been rewritten to link to archived content

View Raw

More Information

⬅️ Previous capture (2021-11-30)

-=-=-=-=-=-=-

<-- back to the mailing list

Gemini privacy

Phil Leblanc philanc at gmail.com

Tue Mar 9 23:04:10 GMT 2021

- - - - - - - - - - - - - - - - - - - 

On Tue, Mar 9, 2021 at 6:36 PM <nothien at uber.space> wrote:

Do you mean "rounding up" (by adding padding) all sent data to 4,096
bytes? I agree, that should do quite well to hide most Gemini data.

Yes. When record padding is configured to a value X, all sent data ispadded (of course before stream encryption) up to the next multiple ofX. So with record_padding = 4096,a 1.5KB file is padded to exactly 4,096 bytes. A 5 KB file is paddedto 8,192 bytes.

A nice mechanism which is well suited to typical Gemini files(according to Stephane Bortzmeyer's stats, 80% of pages are below13KB).

Just writing this, I am wondering... with TLS 1.3, can the _client_
request record padding for the server response?
Reading the TLS 1.3 spec[1], it appears not. Oh well.
[1]: https://tools.ietf.org/html/rfc8446#section-5.4

Section 5.4 concludes with "Later documents may define paddingselection algorithms or define a padding policy request mechanismthrough TLS extensions or some other means"

"Later documents..." So I guess, yes we are not there yet.

P.S: I've been thinking about all the issues we've come across with TLS,
and I've been collecting ideas for a new transport security protocol. I
know ~spc's stance on crypto ("get it approved by the crypto community,
make an implementation, then we'll talk"),

I think Sean Conner's statement is rhetoric or tongue-in-cheek :-)Whether one likes it or not, Gemini IS built upon TLS. Period. Thatship has sailed. So I understand Sean (and others) want to limitentropy in the mailing list

(...) making a wishlist of sorts of all the things that we
would want out of a "good" transport security protocol (if you have any
such ideas, please share them with me). I'll put up my crypto wishlist
sometime soon.

I will be happy to have a look at what you publish and share ideas -but probably not about this topic in this mailing list... :-)

Cheers,

Phil