Official Support into web browsers?
rick
Chrome and Safari(windows and mac) to try and get this protocol
supported into their next versions of their web browsers? If you
haven't then you should and you could tell them you will sort out the
bugs(if any). Then contact Microsoft and Linux and Apple and get them
to release a high priority windowsupdate for windows xp/vista so the
operating system will install the protocol. Same for linux and mac.
Just another question, would it be possible for isp's to censor
websites using this protocol? like the current internet protocols
allow isp's to block websites by blacklist, url, server ip block, dns,
keyword block etc. Will the Phantom protocol withstand ALL censorship
that an isp may try and use?
Michael Prinzinger
so far Phantom is a well designed concept without any implementation.
I am getting started on the implementation right now, but I guess it will be at least another year, until we can release a version to the public.
Therefore it is not necessary at this point to contact anyone. Also we will try to design the protocol in a way, that browsers will support it naturally (automatically),
by targeting a lower level. But we'll see how this works out, when the implementation will have proceeded further.
regarding your second question, the protocol will run on SSL connections, which will make it pretty hard to detect if anyone is actually using the protocol or not.
Effectively it will run down to breaking the SSL encryption key or doing a good job on traffic analysis (but even there, we are trying to become resilient).
It's actually very probable that the protocol might become outlawed in some countries, but then when nobody can proof you're using it, that will be not as big a problem.
Of course countries can always go as far and prohibit the use of cryptography, which France actually tried to do....
If you have further questions on the project, feel free to ask them
also be sure to tell us, if you are interested in contributing :)
regards!
Michael
P.S. If you want to know more about Phantom, I suggest you look at Magnus' presentation here: http://www.fortego.se/phantom-pres.ppt
and later read the design paper where: http://www.fortego.se/phantom-paper.pdf
You can also watch a video of Magnus' presenting his design at Defcon here: https://media.defcon.org/dc-16/video/Defcon16-Magnus_Brading-The_Phantom_Protocol.m4v
Magnus Bråding
> Has the developer tried contacting Microsoft and Firefox and Google
> Chrome and Safari(windows and mac) to try and get this protocol
> supported into their next versions of their web browsers? If you
> haven't then you should and you could tell them you will sort out the
> bugs(if any). Then contact Microsoft and Linux and Apple and get them
> to release a high priority windowsupdate for windows xp/vista so the
> operating system will install the protocol. Same for linux and mac.
Hehe, optimism is never a bad thing, maybe we should wait until the
protocol actually has a working PoC-implementation though. ;-)
> Just another question, would it be possible for isp's to censor
> websites using this protocol? like the current internet protocols
> allow isp's to block websites by blacklist, url, server ip block, dns,
> keyword block etc. Will the Phantom protocol withstand ALL censorship
> that an isp may try and use?
The protocol is designed to be able to withstand any blocking that can
be done with anything else than heavy probabilistic traffic analysis
(which can never be completely countered), yes.
Regards,
Magnus