Oddbean new post about login | logout The privacy concerns are kinda dumb. We are already exposed to all this imho. And relays get a bad rap, it's image services that are #1 threat and yet who turns off profile loading, no one.
It depends, there has been some weird relays assembled just to associate the multiple accounts in the same device. You can't do that easily with image servers.
If you're concerned with privacy, which I am btw. You use a VPN. If you're concerned about privacy and just bitch about connecting to relays.. 乁༼☯‿☯✿༽ㄏ
VPNs can help but it's not fool proof. Relays still get the filter with the pubkeys that are logged into the app, regardless of the VPN or Tor status, connecting to random relays does leak sensitive information.
Sensitive information like what? Like this pubkey came from this VPN exit IP?
yep, virtually at the same time. Time correlations tend to be VERY accurate.
Ah, so for multi account correlation.. you are gonna want to use a different VPN for each account then..
yep, or a separate Tor session.
So it's a non concern. There is nothing additional an app can do, anyone concerned should already be concerned with the relays they are connected to anyway.. IMHO.
having a caching relay connected over Tor would help for untrusted clients, needs to have auth pass-through also would also save bandwidth as well as increase privacy, with Tor or without, as it cuts out a lot of time correlation if you control the cache relay this is why really all clients should have the capability to use at minimum a local cache relay for storage and optionally a remote one (for more privacy)