Coauthor here, somewhat surprised to see this on HN. Any thoughts, questions, or feedback welcome.
Encryption and Globalization 15 Years Later: E2EE and the "Going Dark" Debate
11–20 of 20 posts
Re: Encryption and Globalization 15 Years Later: E2EE and the "Going Dark" Debate
#12Earlier quoted context omitted.
Human readable identities are the hardest part (unless you just mean BIP-style word chains). What’s your approach look like? How do you prevent collisions?
You register a DNS-style name. Registrations lasts a year with a 3 month post-expiration window to reregister, otherwise it gets released back. The system goes out of its way to make name trading uneconomical - specifically to work against speculators and name-sitters from coming in and ruining things.
I wonder if something like this could follow the spirit of "tag" URIs where you include a temporal component. A semantics of "namespace Foo as established time T."
Any usage of the name in identifiers includes the epoch. Identifiers from several epochs could be concurrently in use. Identifiers rooted in different name epochs are not be comparable.
Out of band networking effects need to establish the meaning of a specific name epoch. The disambiguation doesn't work if the intended consumers are unwilling to learn and distinguish the epoch component of identifiers they care about.
I suppose, at the limit, this is the same as just having everyone add some numeric suffix to names they try to register? But it would be more constrained, e.g. structurally enforce that the digits correspond to some kind of clock metadata which is a witnessed and signed part of the decentralized ledger.
Re: Encryption and Globalization 15 Years Later: E2EE and the "Going Dark" Debate
#13Coauthor here, somewhat surprised to see this on HN. Any thoughts, questions, or feedback welcome.
Thanks for putting this together. Found via Schneier’s blog; I thought it was a good summary, and perhaps needed information in the face of attacks like Chat Control.
Re: Encryption and Globalization 15 Years Later: E2EE and the "Going Dark" Debate
#14Earlier quoted context omitted.
Interesting. Yes, the possibility of direct key lookup would solve the problem, especially if existing contacts remain connected even after name expiration/revocation. Perhaps you could do a name presale, although I’m not sure that would be enough funding. I look forward to hearing more about it.
We'll probably do a name presale, but this is deep tech/big infra we're setting up, so it wouldn't be enough. That's why we're busy partnering with like-minded individuals to do a non-traditional raise. We did start with the more traditional route, but all of them (including a16z) were baffled by our choice to not resort to degenerate behavior (i.e. a16z in particular refused to play game without making a token and l…
What two properties are you choosing from Zooko’s Triangle? You say human readable and decentralized, so you must be giving up secure.
Re: Encryption and Globalization 15 Years Later: E2EE and the "Going Dark" Debate
#15Coauthor here, somewhat surprised to see this on HN. Any thoughts, questions, or feedback welcome.
Thanks for putting this together. Found via Schneier’s blog; I thought it was a good summary, and perhaps needed information in the face of attacks like Chat Control.
Oh, I didn't realize it'd made it to Schneier's blog, thanks for letting me know!
A goal of the work was to try to explain to a new audience (specifically nontechnical legal folks) the ongoing challenges with Going Dark. Hopefully it helps!
Re: Encryption and Globalization 15 Years Later: E2EE and the "Going Dark" Debate
#16Coauthor here, somewhat surprised to see this on HN. Any thoughts, questions, or feedback welcome.
The paper says ghost protocol has never been implemented, but wasn't it widely used on trump administration version of the signal-custom-client, which sent messages to a ghost account responsible for indexing and backup of plain text copies?
Re: Encryption and Globalization 15 Years Later: E2EE and the "Going Dark" Debate
#17Coauthor here, somewhat surprised to see this on HN. Any thoughts, questions, or feedback welcome.
The paper says ghost protocol has never been implemented, but wasn't it widely used on trump administration version of the signal-custom-client, which sent messages to a ghost account responsible for indexing and backup of plain text copies?
Good point. Most of this was written before the signal-custom-client thing happened, so it wasn't top of mind. We also considered "serious" systems, deployed en masse. Perhaps we should've included this as well.
Re: Encryption and Globalization 15 Years Later: E2EE and the "Going Dark" Debate
#18Usenet and IRC over I2P.
Re: Encryption and Globalization 15 Years Later: E2EE and the "Going Dark" Debate
#19Earlier quoted context omitted.
We'll probably do a name presale, but this is deep tech/big infra we're setting up, so it wouldn't be enough. That's why we're busy partnering with like-minded individuals to do a non-traditional raise. We did start with the more traditional route, but all of them (including a16z) were baffled by our choice to not resort to degenerate behavior (i.e. a16z in particular refused to play game without making a token and l…
What two properties are you choosing from Zooko’s Triangle? You say human readable and decentralized, so you must be giving up secure.
A few things, Zookos conjecture dates to 2001. It was an observation, not a formal proof of anything, nor a physical limit, as he said in the paper: "I didn't prove that it is impossible to have all three features"
So without conflating Zooko with all the commentators who followed saying, "but Secure meant ...", lets look at the real definition from Zooko:
1. distributed (in the sense that there is no central authority which can control the namespace, which is the same as saying that the namespace spans trust boundaries), 2. secure (in the sense that name lookups cannot be forced to return incorrect values by an attacker, where the definition of "incorrect" is determined by some universal policy of name ownership), 3. and having human-usable keys.
So the system we are building (I am the architect) Satisfies all 3. I went and added a fourth, which is privacy. I say:
4. Private (Whereby a scan of the name registry does not reveal the human readable names).
I think 4 is a necessary property to mitigate CT log like reconnaissance feeds being used by threat actors to enumerate every registered identity for the purpose of automated attacks.
Re: Encryption and Globalization 15 Years Later: E2EE and the "Going Dark" Debate
#20Earlier quoted context omitted.
The paper says ghost protocol has never been implemented, but wasn't it widely used on trump administration version of the signal-custom-client, which sent messages to a ghost account responsible for indexing and backup of plain text copies?
Good point. Most of this was written before the signal-custom-client thing happened, so it wasn't top of mind. We also considered "serious" systems, deployed en masse. Perhaps we should've included this as well.
considering a system used by the white house and Pentagon among others not widely deployed is questionable :)
the timing mistake is on me. i still think this site is about "news". very interesting paper regardless.