Hi Greg, 

Regarding your second question, 
Last year we introduced a DHT proxy feature, allowing to hide your device IP 
from the distributed network. 

You can use the free proxy that we provide (dhtproxy.jami.net), or configure 
your own. 
https://github.com/savoirfairelinux/opendht/wiki/Running-a-node-with-dhtnode 

Best regards, 

Adrien 


De: "Greg Troxel" <[email protected]> 
À: "Cyrille Béraud" <[email protected]> 
Cc: [email protected] 
Envoyé: Dimanche 2 Décembre 2018 20:20:01 
Objet: Re: [Ring] Important information about the project 

Given your announcement I have two comments/questions. 

What kind of CLA/assignment will there be with Jami? With what entity? 
(I personally view most CLA terms and any assignment to other than a 
charitable non-profit with a mission to promote free software to be 
objectionable, and they have successfully discouraged me from 
contributing to multiple projects.) 


Entirely separately, I have long had a concern about user tracking and 
the DHT architecture. I hear that Ring is "secure", but that seems to 
focus on confidentiality of the traffic (and perhaps integratity/DAO). 
There are two additional important properties: confidentiality of 
traffic meatdata, and confidentiality of user IP address. WIthout 
really understanding, it seems that if a user registers in the DHT 
somehow, then there is some ability for some third party to gain 
information about the IP address that the user registered from, when 
they are registered, and their mobility patterns. I don't see 
discussion of this risk in things that I've read -- but perhaps I am 
failing to read something I should. 

Greg 

Reply via email to