Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Potentially support datagram protocols without UDP transport #9

Open
GoogleCodeExporter opened this issue Mar 17, 2015 · 2 comments
Open

Comments

@GoogleCodeExporter
Copy link

I fully understand that using anything other than standard TLS/SSL would make 
it easier for the protocol to be fingerprinted and potentially blocked. 
FOrtunately, another project with a completely different aim has already worked 
on the idea of transporting unreliable message-based protocols efficiently on 
top of reliable stream-based protocols including TLS/SSL, without making it 
possible to dinstinguish such behavior by means other than traffic flow 
analysis. I recommend looking at http://dedis.cs.yale.edu/2009/tng/ - 
especially their paper "Minion: Unordered Delivery Wire-Compatible with TCP and 
TLS" and the drafts "Improving OpenSSL to Process Out of Order Data" and 
"Unordered Delivery in TLS-Encrypted Connections".


Original issue reported on code.google.com by [email protected] on 6 Mar 2012 at 7:06

@GoogleCodeExporter
Copy link
Author

I will note, however, that there may still end up being problems with this 
since you will end up with doubled congestion control, which behaves... badly. 
DTLS is really the only way to solve that, asd it *is* distingushable from 
standard TLS.

Original comment by [email protected] on 6 Mar 2012 at 8:13

@GoogleCodeExporter
Copy link
Author

A potential solution may be to adopt the TNG architecture more throughly, which 
could provide other benefits. It's a rather neat concept, and the main reason 
it is unlikely to be widely deployed on the public internet is due to legacy 
concerns, which are less of an issue here.

Original comment by [email protected] on 6 Mar 2012 at 8:17

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant