New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

How to _not_ submit history of IDs from the last N days to any DB #4

Open

kozmaf opened this issue Apr 6, 2020 · 0 comments

kozmaf commented Apr 6, 2020

server should not learn anything besides who is infected, ideally not even that

We believe it's possible to achieve this by anonymously broadcasting directly to contacts:

without any server, so no broadcasting any list of IDs to a public DB
without revealing your own identity
without knowing your contacts' identities

and should address most of the issues remaining, such as compromise on random IDs vs random ID per timeslot, cloning and impersonation.

Outline here; we're starting on an implementation now. Feedback welcome.

degregat assigned degregat and unassigned degregat

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment