On Wed, Jul 31, 2013 at 11:55 AM, Brian Wolff <bawolff(a)gmail.com> wrote:
Which kind of ignores the issue that encrypting with
ssl doesn't do a
lot against traffic analysis, when its publicly known how big the
pages you're downloading are, and how many images/other assets they
have on them. NSA certainly has the resources to do this if they want.
If you can do this sort of thing:
http://blog.ioactive.com/2012/02/ssl-traffic-analysis-on-google-maps.html
against google maps, I imagine it should be much simpler to do
something like that for Wikipedia. (Our data has more variation in it,
and the data is all publicly available)
--bawolff
Time to start adding a random amount of extra packets with each request? :)
James Alexander
Legal and Community Advocacy
Wikimedia Foundation
(415) 839-6885 x6716 @jamesofur