Re: [tor-dev] Proposal 198: Restore semantics of TLS ClientHello

2012-03-20 Thread Jacob Appelbaum
On 03/20/2012 09:08 PM, Nick Mathewson wrote: > On Tue, Mar 20, 2012 at 11:57 PM, Jacob Appelbaum wrote: > [...] >> Ah ha. That sounds like a nightmare. Is there a bug report we can pile >> on to request that they don't create a headache for everyone in the future? > > There is, but I don't curre

Re: [tor-dev] Proposal 198: Restore semantics of TLS ClientHello

2012-03-20 Thread Nick Mathewson
On Tue, Mar 20, 2012 at 11:57 PM, Jacob Appelbaum wrote: [...] > Ah ha. That sounds like a nightmare. Is there a bug report we can pile > on to request that they don't create a headache for everyone in the future? There is, but I don't currently see much point: their developers are irritated, and

Re: [tor-dev] Proposal 198: Restore semantics of TLS ClientHello

2012-03-20 Thread Nick Mathewson
Jacob sent me this message in reply to my last; sending to tor-dev with permission. On Tue, Mar 20, 2012 at 11:57 PM, Jacob Appelbaum wrote: > On 03/20/2012 08:14 PM, Nick Mathewson wrote: >> On Tue, Mar 20, 2012 at 9:30 PM, Jacob Appelbaum wrote: >>> On 03/20/2012 08:33 AM, Nick Mathewson wrote

Re: [tor-dev] Proposal 198: Restore semantics of TLS ClientHello

2012-03-20 Thread Nick Mathewson
Forgot to send this to tor-dev: ouch. Sending now. On Tue, Mar 20, 2012 at 9:30 PM, Jacob Appelbaum wrote: > On 03/20/2012 08:33 AM, Nick Mathewson wrote: >> Filename: 198-restore-clienthello-semantics.txt >> Title: Restore semantics of TLS ClientHello >> Author: Nick Mathewson >> Created: 19-Ma

Re: [tor-dev] Mnemonic 80-bit phrases (proposal)

2012-03-20 Thread Sai
On Tue, Mar 20, 2012 at 23:09, Ken Takusagawa II wrote: > One more note: the Soundex and Double Metaphone algorithms may be useful for > determining if two words sound alike. True. But we don't care nearly as much about homophony as about synonymy. Homophony is a heightened concern for things pr

Re: [tor-dev] Proposal 198: Restore semantics of TLS ClientHello

2012-03-20 Thread Robert Ransom
On 2012-03-21, Tom Ritter wrote: > On 20 March 2012 11:33, Nick Mathewson wrote: >> Filename: 198-restore-clienthello-semantics.txt >> Title: Restore semantics of TLS ClientHello >> Author: Nick Mathewson >> Created: 19-Mar-2012 >> Status: Open > > I've not worked with TLS renegotiations before,

Re: [tor-dev] Mnemonic 80-bit phrases (proposal)

2012-03-20 Thread Ken Takusagawa II
One more note: the Soundex and Double Metaphone algorithms may be useful for determining if two words sound alike. And yet one more attempt at something similar from years ago, doing only words, not grammatical sentences: http://kenta.blogspot.com/2008/08/hash-of-words.html Ken _

Re: [tor-dev] Proposal 198: Restore semantics of TLS ClientHello

2012-03-20 Thread Nick Mathewson
On Tue, Mar 20, 2012 at 10:48 PM, Tom Ritter wrote: > On 20 March 2012 11:33, Nick Mathewson wrote: >> Filename: 198-restore-clienthello-semantics.txt >> Title: Restore semantics of TLS ClientHello >> Author: Nick Mathewson >> Created: 19-Mar-2012 >> Status: Open > > I've not worked with TLS rene

Re: [tor-dev] Proposal: Integration of BridgeFinder and BridgeFinderHelper

2012-03-20 Thread Robert Ransom
On 2012-03-21, Mike Perry wrote: > The following proposal should complete SponsorF tickets #5010-5012. > > I've pushed the proposal to my torspec.git branch > mikeperry/bridgefinder, since the POSTMESSAGE Proposal ended up with > some garbling at somewhere along the cut and paste chain. That branc

Re: [tor-dev] Proposal 198: Restore semantics of TLS ClientHello

2012-03-20 Thread Tom Ritter
On 20 March 2012 11:33, Nick Mathewson wrote: > Filename: 198-restore-clienthello-semantics.txt > Title: Restore semantics of TLS ClientHello > Author: Nick Mathewson > Created: 19-Mar-2012 > Status: Open I've not worked with TLS renegotiations before, but could Tor perform a renegotiation after

Re: [tor-dev] Mnemonic 80-bit phrases (proposal)

2012-03-20 Thread Sai
On Tue, Mar 20, 2012 at 20:11, Ken Takusagawa II wrote: > 1. You need 2^8=256 templates, not just 8, to reach 6*12+8=80 bits. We won't know for sure how it hashes out until we make both the dictionaries and the syntax generator. The ambiguity was intentional. But yes, it may well use a number of

Re: [tor-dev] Proposal: Integration of BridgeFinder and BridgeFinderHelper

2012-03-20 Thread Jacob Appelbaum
On 03/20/2012 06:23 PM, Mike Perry wrote: > The following proposal should complete SponsorF tickets #5010-5012. > > I've pushed the proposal to my torspec.git branch > mikeperry/bridgefinder, since the POSTMESSAGE Proposal ended up with > some garbling at somewhere along the cut and paste chain. T

Re: [tor-dev] Proposal 198: Restore semantics of TLS ClientHello

2012-03-20 Thread Jacob Appelbaum
On 03/20/2012 08:33 AM, Nick Mathewson wrote: > Filename: 198-restore-clienthello-semantics.txt > Title: Restore semantics of TLS ClientHello > Author: Nick Mathewson > Created: 19-Mar-2012 > Status: Open > [ ... ] > Currently, OpenSSL 1.0.0 (in its default configuration) supports every > c

[tor-dev] Proposal: Integration of BridgeFinder and BridgeFinderHelper

2012-03-20 Thread Mike Perry
The following proposal should complete SponsorF tickets #5010-5012. I've pushed the proposal to my torspec.git branch mikeperry/bridgefinder, since the POSTMESSAGE Proposal ended up with some garbling at somewhere along the cut and paste chain. That branch also contains fixes for the POSTMESSAGE p

Re: [tor-dev] Mnemonic 80-bit phrases (proposal)

2012-03-20 Thread Ken Takusagawa II
On Feb 29, 2012 1:58 PM, "Sai" wrote: > For a 6 word sentence, with 8 (3b) templates, we need ~12b (4k word) > dictionaries for each word category. 1. You need 2^8=256 templates, not just 8, to reach 6*12+8=80 bits. 2. Having toyed with this idea in the past, let me warn that forming a 4096 w

[tor-dev] Proposal 198: Restore semantics of TLS ClientHello

2012-03-20 Thread Nick Mathewson
Filename: 198-restore-clienthello-semantics.txt Title: Restore semantics of TLS ClientHello Author: Nick Mathewson Created: 19-Mar-2012 Status: Open Overview: Currently, all supported Tor versions try to imitate an older version of Firefox when advertising ciphers in their TLS ClientHello.