[tor-dev] Projects to combat/defeat data correlation

Ian Goldberg iang at cs.uwaterloo.ca
Mon Jan 20 13:30:12 UTC 2014

On Sat, Jan 18, 2014 at 01:40:43AM +0000, Matthew Finkel wrote:
> obfs3 is supposed to be fairly difficult to detect because entropy
> estimation is seemingly more difficult than typically assumed,
> and thus far from what has been seen in practice this seems to be true.

Wouldn't the way to detect obfs3 be to look at packet sizes, not
contents?  obfs3 doesn't hide those at all, right?

   - Ian

More information about the tor-dev mailing list