Re: [tor-dev] Quantum-safe Hybrid handshake for Tor

2016-04-02 Thread Yawning Angel
On Sat, 2 Apr 2016 18:48:24 -0400 Jesse V wrote: > Again, I have very little understanding of post-quantum crypto and I'm > just starting to understand ECC, but after looking over > https://en.wikipedia.org/wiki/Supersingular_isogeny_key_exchange and > skimming the SIDH paper, I'm rather impressed

Re: [tor-dev] Advice regarding Cloudflare

2016-04-02 Thread Yawning Angel
On Sat, 2 Apr 2016 22:31:29 -0700 Ryan Carboni wrote: > On the Tor side, a way to minimize abuse is for exit nodes not to > allow multiple IP addresses from a single circuit. This would make web > crawling with Tor expensive, although it will disable the ability for > a single tab to use a single

[tor-dev] Advice regarding Cloudflare

2016-04-02 Thread Ryan Carboni
I could see why cloudflare is annoyed with you, you are annoying activists from their perspective, although you folks aren't chaining yourselves to coal power plants . But I also use Tor from time to time, so I'll offer some advice. On the Tor side, a way to minimize abuse is for exit nodes not to

Re: [tor-dev] Quantum-safe Hybrid handshake for Tor

2016-04-02 Thread Ryan Carboni
I just want to note you only need an algorithm that protects against 2^80 quantum operations for short-term keys. Regardless, I doubt anyone is going to be spending a billion dollars to crack data sent over a single Tor connection. ___ tor-dev mailing li

Re: [tor-dev] Quantum-safe Hybrid handshake for Tor

2016-04-02 Thread Jesse V
On 02/03/2016 12:12 PM, Jeff Burdges wrote: > I donno that you'll ever beat that 1kb key size with a post-quantum > system. There is a lattice based signature scheme and an isogeny based > scheme that'll both beat SPHINCS on signature sizes, but I think not so > much on key size. I just wanted t

Re: [tor-dev] Request for feedback/victims: cfc-0.0.2

2016-04-02 Thread Ian Goldberg
On Sat, Apr 02, 2016 at 07:19:30PM +, Yawning Angel wrote: > It's not a request header set by the browser. archive.is is acting > like a HTTP proxy and explicitly setting X-F-F. I wonder what would happen if the browser *also* set X-F-F...? ___ tor-

Re: [tor-dev] Request for feedback/victims: cfc-0.0.2

2016-04-02 Thread Yawning Angel
On Sat, 02 Apr 2016 17:00:10 + ban...@openmailbox.org wrote: > webcitation.org is an archive.is alternative. Potentially it doesn't > forward request headers (?) It's not a request header set by the browser. archive.is is acting like a HTTP proxy and explicitly setting X-F-F. From the FAQ:

Re: [tor-dev] Request for feedback/victims: cfc-0.0.2

2016-04-02 Thread bancfc
On 2016-04-01 18:06, Yawning Angel wrote: On Fri, 01 Apr 2016 18:21:10 +0200 Jeff Burdges wrote: Are there any more sites where CloudFalre appears on archive.is? https://www.aei.org/publication/gen-michael-hayden-on-apple-the-fbi-and-data-encryption/ ​https://archive.is/7u5P8 It's some parti