<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">Good point. An attacker with a network backbone perspective could do a good job of measuring user->mixmaster, mixmaster-> mixmaster, mixmaster->destination<div>This would allow an easy calculation of the amount of bitbucket happening at the given remailer, and of the real traffic in and out of the mix.</div><div><br></div><div><span class="Apple-tab-span" style="white-space:pre"> </span>-Lance</div><div><br><div apple-content-edited="true">
<span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><div>--</div><div>Lance Cottrell</div><div><a href="mailto:loki@obscura.com">loki@obscura.com</a></div><div><br></div></span><br class="Apple-interchange-newline">
</div>
<br><div><div>On Mar 18, 2014, at 1:16 PM, Charles Teller <<a href="mailto:cteller@riseup.net">cteller@riseup.net</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><blockquote type="cite">Do we want attackers to have access to the content vs. cover traffic<br>ratio?<br></blockquote><br>Completely valid question, and I'm open to discussion on it. I have two<br>thoughts on it at this point.<br><br>First, I think the ratio is already known by certain parties. It has<br>always seemed reasonable to assume that plaintext traffic out of remailers<br>is tracked. I am not proposing examining anything else other than messages<br>that have already gone through the entire remailer chain.<br><br>Second, I think research into this could prove useful. If not useful, at<br>least interesting. Examining plaintext messages coming out to get an idea<br>of how much real traffic is being sent could prove enlightening. And of<br>course anything encrypted (via PGP or a Type-II hop) would not reveal<br>anything and so would not (could not) be examined.<br><br>"Examined" is the wrong word there, I think.<br><br>Those are my thoughts. I could be wrong, and as I said in my first email,<br>I am open to discussion on this. I do not run a remailer, so it is up to<br>others to decide if this is useful and worth any possible risk.<br><br><br>_______________________________________________<br>Remops mailing list<br><a href="mailto:Remops@lists.mixmin.net">Remops@lists.mixmin.net</a><br>http://lists.mixmin.net/mailman/listinfo/remops<br></blockquote></div><br></div></body></html>