Metadata

DEfO - Developing ECH for OpenSSL (round two)

November 9, 2023

Encrypted ClientHello (ECH) plugs a privacy-hole in TLS, hiding previously visible details from network observers. The most important being the name …

Scanning apps, off the record

September 28, 2022

Smart phones have brought us so many wonderful capabilities. They let people around the world access vast realms of information. They let app …

The Search for Ethical Apps: Let's start with governments

September 1, 2022

Governments across the world are moving services to mobile apps. The vast majority of these apps are only available in the Google Play store or in the …

Debian over HTTPS

December 8, 2021

Debian’s package manager apt has a time-tested method of securely providing packages from the network built on OpenPGP signatures. Even though …

Implementing TLS Encrypted Client Hello

November 30, 2021

As part of the DEfO project, we have been working on accelerating the development Encrypted Client Hello (ECH) as standardized by the IETF. ECH is the …

New insights into clean analytics

March 2, 2021

There is a giant problem with the “collect it all” status quo that pervades on the Internet, this has been clear for a long time. Tracking …

Tracking usage without tracking people

June 8, 2017

One thing that has become very clear over the past years is that there is a lot of value in data about people. Of course, the most well known examples …

HOWTO: get all your Debian packages via Tor Onion Services

July 31, 2016

Following up on some privacy leaks that we looked into a while back, there are now official Debian Tor Onion Services for getting software packages …

Experimental app to improve privacy in location sharing

January 29, 2015

As part of the T2 Panic effort, I’ve recently been diving deep into the issues of sharing location. It is unfortunately looking really bad, with many …

Sharing your location privately

January 23, 2015

Facebook location sharing embeds the location in every single message, providing a detailed log to the recipient, Facebook, and anyone Facebook …