[tor-talk] HTTP/3 on UDP and no TCP

[Lars Noodén]

I noticed this post about what is possibly the next unavoidable big
change in web browsing:

"HTTP/3"
https://daniel.haxx.se/blog/2018/11/11/http-3/

This looks official, but even if the move is unofficial, if Google and
Facebook adopt it, it is a defacto necessity. So, is the idea to use
UDP a plan that the WWW will have to contend with?

What are the repercussions for the Tor network, and the Tor Browser
Bundle, if HTTP no longer goes over TCP but over UDP instead?

/Lars

[n***@neelc.org]

For this, we will require Tor to support UDP, or at least be QUIC-aware. Hopefully TCP-based HTTP will be supported for a few more years, but we can't expect the web to support TCP indefinitely (look at SSLv3, no website supports it anymore).

To support UDP or QUIC, some architectural changes to Tor may be needed: https://www.reddit.com/r/TOR/comments/7oizra/why_tor_doesnt_support_udp/dsa8gix

It will certainly be a large undertaking, but probably is necessary (unless we want to lock Tor users from the web of 5 years in the future). Maybe we may need a new anonymity network for QUIC. Who knows?

Disclaimer: I am a Core Tor contributor. I am no expert on QUIC or HTTP.

-Neel Chauhan

===

https://www.neelc.org

We could also use a QUIC

Post by Lars Noodén
I noticed this post about what is possibly the next unavoidable big
"HTTP/3"
https://daniel.haxx.se/blog/2018/11/11/http-3
This looks official, but even if the move is unofficial, if Google and
Facebook adopt it, it is a defacto necessity. So, is the idea to use
UDP a plan that the WWW will have to contend with?
What are the repercussions for the Tor network, and the Tor Browser
Bundle, if HTTP no longer goes over TCP but over UDP instead?
/Lars
--
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

[grarpamp]

If you need to move UDP (or any other non-TCP protocol, including
raw IP) across tor today, you can use OnionCat or OnionVPN.
They work fine and automagically.

Obviously those are also the only available solution
for testing and using QUIC with tor today, other than
running VPN over tor out to clearnet sites, or privately
between your own onions.