Securing The Internet – Google’s Obfuscated TCP

Want to help support this blog? Try out Oh Dear, the best all-in-one monitoring tool for your entire website, co-founded by me (the guy that wrote this blogpost). Start with a 10-day trial, no strings attached.

We offer uptime monitoring, SSL checks, broken links checking, performance & cronjob monitoring, branded status pages & so much more. Try us out today!

Profile image of Mattias Geniar

Mattias Geniar, November 01, 2008

Follow me on Twitter as @mattiasgeniar

The problem with current web-security lies in different levels, both in the application-layer as well as the actual networking – data transferred in the background.

As it is now, it requires an HTTPs-connection to have an encrypted data-transfer, and while it’s widely available for everyone to use – not everyone chooses to adopt it. Each can have their reasons; heavier server load due to encrypting/decrypting, requires extra set-up, not every proxy-server supports HTTPs traffic and thus blocks the site, …

A solution to this would be to start securing your data-transfers on the TCP level, by adding a layer of “encryption” to it. That’s what Google’s Obfuscated TCP (obstcp) is all about. A transport layer protocol that adds opportunistic encryption.

Google's Obfuscated TCP

Google's Obfuscated TCP

This method can help with easy sniffing of network traffic on public wifi’s, or your personal network. Google provided an easy-to-follow introduction video, that explains in short how it works and what it can do.

While the idea sounds great in theory, it requires yet another implementation of current software. And history’s proven that’s not an easy thing to accomplish. Then again, Google does have quite an influence.

You can read more about it at the http://code.google.com/p/obstcp/ pages.



Want to subscribe to the cron.weekly newsletter?

I write a weekly-ish newsletter on Linux, open source & webdevelopment called cron.weekly.

It features the latest news, guides & tutorials and new open source projects. You can sign up via email below.

No spam. Just some good, practical Linux & open source content.