Re: dns outbound

["Marcelo Barbosa Lima" <marcelo.lima () dcc unicamp br>]

> It'll be _very_ easy to add enough obfuscation to the HTTP transfer to
> make sure that the HTTP proxy or MLSI filter won't have a clue. A
> little encryption will go far, even with a 20-bit key to keep the
> NSA^H^H^Hlaw enforcement happy. It may pollute a Squid cache, but
> it'll get through.
>
> I'm tempted to write an internet draft 'General Purpose stealth
> tunneling through HTTP', just to make a point.

   I saw one way to make it stealth using simply GET
(http://www.anithing.com/data_tunelling) command (trojan horse client) and
replies (server spoofed).


                                Marcelo Barbosa Lima
                                  marcelo.lima () dcc unicamp br
                             Mestrado em Ciencia da Computacao