Mechanism · Network taps and certifiers
Residual side channels in simple passive setups
On this page
SignificantTheoretical argumentOpen
Amodo's analysis of its own tapped prototype lists unvalidated header fields, timing of permitted traffic and variation in response formatting as residual channels, and concludes that the passive tap must be replaced by an active one 8.
Sources: [8]