Subject: Re: [dispatch] New draft on RTCWeb Requirements and API draft-jennings-rtcweb-api

From: "Lorenzo Miniero" <[email-masked]>
Date: Sun, 20 Mar 2011 13:43:23 +0100

---------- Header Originale -----------

Da      : "Dean Willis" [email-masked]
A          : "Lorenzo Miniero" [email-masked]
Cc          : "Henry Sinnreich" [email-masked],"DISPATCH list" [email-masked]
Data      : Fri, 18 Mar 2011 22:34:06 -0500
Oggetto : Re: [dispatch] New draft on RTCWeb Requirements and API draft-jennings-rtcweb-api

> 
> On Mar 16, 2011, at 3:12 PM, Lorenzo Miniero wrote:
> > 
> > We implemented something like that for our system, also documented in a paper lately: basically a controller protocol that tunnels every other protocol on top of HTTP to bypass restrictive firewalls. Since it works, we were also thinking about a "lightweight" version of such protocol to only convey RTP specifically for our web interface, considering RTP is the only protocol we couldn't wrap via JavaScript so far. So I agree that such a TURN-like protocol would be a good idea for the WG.
> 
> 
> I've recently been considering the merits of a VPN that looks like MobileIP over HTTPS over Tor. It would let one run any kind of communications traffic (albeit with odd time-domain distributions), while one would appear to be simply running HTTP traffic to various innocuous websites. The problem, of course, is that traffic that is not Web surfing has a very different time.size fingerprint, and could easily be detected. However, the approach would seem to work very well for letting people do actual Web traffic obscurely. 
> 
> If one took the Tor layer out of my idea-space, then one might get something very much like your approach. Can you share a link to your paper?
> 

Hi Dean,
you can find the paper here:

http://www.springerlink.com/content/6107737260111804/

let me know if you've problems getting the paper from there.
Our approach is less "generic" than the one you've devised, though, since we had a specific use case in mind.

L.

> --
> Dean

--
Lorenzo Miniero
http://www.meetecho.com