Promising protocol much easier to fingerprint than HTTPS Share
Copy
Google s QUIC (Quick UDP Internet Connections) protocol, announced in 2013 as a way to make the web faster, waited seven years before being implemented in the ad giant s Chrome browser. But it still arrived before privacy could get there.
A trio of researchers from China have found that QUIC is more vulnerable to web fingerprinting than HTTPS, a shortcoming that could make it easier for an adversary to infer which websites an individual is visiting by scrutinizing network traffic.
Boffins Pengwei Zhan and Liming Wang of the Chinese Academy of Sciences, and Yi Tang, of Guangzhou University, funded by China’s National Key R&D Program, describe their findings in a paper distributed via ArXiv.