<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>Hi all,</p>
<p>The French state is making a glosing about the
"privacy-preserving", "anonymous" contact tracing app they are
developing with Inria (national informatics research agency). You
can check about the protocol proposal, ROBERT, here:
<a class="moz-txt-link-freetext" href="https://github.com/ROBERT-proximity-tracing/documents">https://github.com/ROBERT-proximity-tracing/documents</a> (in
English!)</p>
<p>As you would expect, the proposal is not privacy-preserving
unless you believe the State would never ever misbehave, e.g. link
IP address to identity with the help of ISPs etc. There is some
relevant criticism here:
<a class="moz-txt-link-freetext" href="https://github.com/ROBERT-proximity-tracing/documents/issues/6">https://github.com/ROBERT-proximity-tracing/documents/issues/6</a></p>
<p>I'd like to propose a really private "contact tracing"
counter-proposal, which would use Tor's onion services for
sender-receiver anonymity. Not that I am a proponent of the idea,
but we need to come up with alternatives in the debate.</p>
<p>My question is: <i>would the Tor community agree on having
StopCovid's traffic go through its net?</i> In my proposal, I
would only broadcast a message from a declared COVID-positive
person to all its recent contacts; the proximity sensing would
remain Bluetooth. Still, deployed at the scale of a country, it's
a lot of traffic.</p>
<p>Thank you for your time, I will keep you posted,<br>
Adrien<br>
</p>
<p><br>
</p>
</body>
</html>