[tor-dev] Building a privacy-preserving "contact tracing" app

[Adrien Luxey]

Hi all,

The French state is making a glosing about the "privacy-preserving",
"anonymous" contact tracing app they are developing with Inria (national
informatics research agency). You can check about the protocol proposal,
ROBERT, here: https://github.com/ROBERT-proximity-tracing/documents (in
English!)

As you would expect, the proposal is not privacy-preserving unless you
believe the State would never ever misbehave, e.g. link IP address to
identity with the help of ISPs etc. There is some relevant criticism
here: https://github.com/ROBERT-proximity-tracing/documents/issues/6

I'd like to propose a really private "contact tracing" counter-proposal,
which would use Tor's onion services for sender-receiver anonymity. Not
that I am a proponent of the idea, but we need to come up with
alternatives in the debate.

My question is: /would the Tor community agree on having StopCovid's
traffic go through its net?/ In my proposal, I would only broadcast a
message from a declared COVID-positive person to all its recent
contacts; the proximity sensing would remain Bluetooth. Still, deployed
at the scale of a country, it's a lot of traffic.

Thank you for your time, I will keep you posted,
Adrien


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.torproject.org/pipermail/tor-dev/attachments/20200422/035e6891/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://lists.torproject.org/pipermail/tor-dev/attachments/20200422/035e6891/attachment.sig>