{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:C7WDZNOKU5EBAQ5R3FBGBLGPOW","short_pith_number":"pith:C7WDZNOK","canonical_record":{"source":{"id":"2203.07806","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-03-15T11:41:43Z","cross_cats_sorted":[],"title_canon_sha256":"9c79d9537b639ae87dfcb52c33fa44e23d0c54ae7499c663edb7748c9e6ff235","abstract_canon_sha256":"edb7ae098cc56042e1a9ec2b3a802168caa8dcec415c445f516a6e72bf109596"},"schema_version":"1.0"},"canonical_sha256":"17ec3cb5caa7481043b1d94260accf75b5ee590aa0ee682d5036b718a3ad1a47","source":{"kind":"arxiv","id":"2203.07806","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2203.07806","created_at":"2026-07-05T05:25:28Z"},{"alias_kind":"arxiv_version","alias_value":"2203.07806v2","created_at":"2026-07-05T05:25:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2203.07806","created_at":"2026-07-05T05:25:28Z"},{"alias_kind":"pith_short_12","alias_value":"C7WDZNOKU5EB","created_at":"2026-07-05T05:25:28Z"},{"alias_kind":"pith_short_16","alias_value":"C7WDZNOKU5EBAQ5R","created_at":"2026-07-05T05:25:28Z"},{"alias_kind":"pith_short_8","alias_value":"C7WDZNOK","created_at":"2026-07-05T05:25:28Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:C7WDZNOKU5EBAQ5R3FBGBLGPOW","target":"record","payload":{"canonical_record":{"source":{"id":"2203.07806","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-03-15T11:41:43Z","cross_cats_sorted":[],"title_canon_sha256":"9c79d9537b639ae87dfcb52c33fa44e23d0c54ae7499c663edb7748c9e6ff235","abstract_canon_sha256":"edb7ae098cc56042e1a9ec2b3a802168caa8dcec415c445f516a6e72bf109596"},"schema_version":"1.0"},"canonical_sha256":"17ec3cb5caa7481043b1d94260accf75b5ee590aa0ee682d5036b718a3ad1a47","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:25:28.255020Z","signature_b64":"R9BEJMmSEFshdnfHQXV4KC1Nc4AiFXfH6iQVZAajzbz0lFIvdHn9PLjGnW1DV02FTKKknoldFGSKY14NYxZRDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"17ec3cb5caa7481043b1d94260accf75b5ee590aa0ee682d5036b718a3ad1a47","last_reissued_at":"2026-07-05T05:25:28.254546Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:25:28.254546Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2203.07806","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:25:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"w3lbQW5LpifmQRV3eVleYNr1etR/5uGccGFnqz7HSiq+4qSoGp01NMpyJHmpit3+rExOSj9L/Jv6nDgfZdl4CQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T14:16:35.519319Z"},"content_sha256":"0e150667e65db7ebc7e3bded5b66468e17588e8875cfead663b1c8571325a213","schema_version":"1.0","event_id":"sha256:0e150667e65db7ebc7e3bded5b66468e17588e8875cfead663b1c8571325a213"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:C7WDZNOKU5EBAQ5R3FBGBLGPOW","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"You get PADDING, everybody gets PADDING! You get privacy? Evaluating practical QUIC website fingerprinting protections for the masses","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Carmela Troncoso, Christopher Wood, Ludovic Barman, Marwan Fayed, Nick Sullivan, Sandra Siby","submitted_at":"2022-03-15T11:41:43Z","abstract_excerpt":"Website fingerprinting (WF) is a well-know threat to users' web privacy. New internet standards, such as QUIC, include padding to support defenses against WF. Previous work only analyzes the effectiveness of defenses when users are behind a VPN. Yet, this is not how most users browse the Internet. In this paper, we provide a comprehensive evaluation of QUIC-padding-based defenses against WF when users directly browse the web. We confirm previous claims that network-layer padding cannot provide good protection against powerful adversaries capable of observing all traffic traces. We further demo"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2203.07806","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2203.07806/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:25:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Ua5HNKLWCk1LODGjjhtcg7QYQS7rp2ZR1+dlScHrWlKrdfxJqflTszS5BLvqUov7qdDf7l0o/iJFXFCmK/TiAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T14:16:35.519844Z"},"content_sha256":"9716f00a9df7f2dc645a419ed17cbc4611d7605a52cc8a3d4ef3f983863d6d69","schema_version":"1.0","event_id":"sha256:9716f00a9df7f2dc645a419ed17cbc4611d7605a52cc8a3d4ef3f983863d6d69"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/C7WDZNOKU5EBAQ5R3FBGBLGPOW/bundle.json","state_url":"https://pith.science/pith/C7WDZNOKU5EBAQ5R3FBGBLGPOW/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/C7WDZNOKU5EBAQ5R3FBGBLGPOW/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-19T14:16:35Z","links":{"resolver":"https://pith.science/pith/C7WDZNOKU5EBAQ5R3FBGBLGPOW","bundle":"https://pith.science/pith/C7WDZNOKU5EBAQ5R3FBGBLGPOW/bundle.json","state":"https://pith.science/pith/C7WDZNOKU5EBAQ5R3FBGBLGPOW/state.json","well_known_bundle":"https://pith.science/.well-known/pith/C7WDZNOKU5EBAQ5R3FBGBLGPOW/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:C7WDZNOKU5EBAQ5R3FBGBLGPOW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"edb7ae098cc56042e1a9ec2b3a802168caa8dcec415c445f516a6e72bf109596","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-03-15T11:41:43Z","title_canon_sha256":"9c79d9537b639ae87dfcb52c33fa44e23d0c54ae7499c663edb7748c9e6ff235"},"schema_version":"1.0","source":{"id":"2203.07806","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2203.07806","created_at":"2026-07-05T05:25:28Z"},{"alias_kind":"arxiv_version","alias_value":"2203.07806v2","created_at":"2026-07-05T05:25:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2203.07806","created_at":"2026-07-05T05:25:28Z"},{"alias_kind":"pith_short_12","alias_value":"C7WDZNOKU5EB","created_at":"2026-07-05T05:25:28Z"},{"alias_kind":"pith_short_16","alias_value":"C7WDZNOKU5EBAQ5R","created_at":"2026-07-05T05:25:28Z"},{"alias_kind":"pith_short_8","alias_value":"C7WDZNOK","created_at":"2026-07-05T05:25:28Z"}],"graph_snapshots":[{"event_id":"sha256:9716f00a9df7f2dc645a419ed17cbc4611d7605a52cc8a3d4ef3f983863d6d69","target":"graph","created_at":"2026-07-05T05:25:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2203.07806/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Website fingerprinting (WF) is a well-know threat to users' web privacy. New internet standards, such as QUIC, include padding to support defenses against WF. Previous work only analyzes the effectiveness of defenses when users are behind a VPN. Yet, this is not how most users browse the Internet. In this paper, we provide a comprehensive evaluation of QUIC-padding-based defenses against WF when users directly browse the web. We confirm previous claims that network-layer padding cannot provide good protection against powerful adversaries capable of observing all traffic traces. We further demo","authors_text":"Carmela Troncoso, Christopher Wood, Ludovic Barman, Marwan Fayed, Nick Sullivan, Sandra Siby","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-03-15T11:41:43Z","title":"You get PADDING, everybody gets PADDING! You get privacy? Evaluating practical QUIC website fingerprinting protections for the masses"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2203.07806","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0e150667e65db7ebc7e3bded5b66468e17588e8875cfead663b1c8571325a213","target":"record","created_at":"2026-07-05T05:25:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"edb7ae098cc56042e1a9ec2b3a802168caa8dcec415c445f516a6e72bf109596","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-03-15T11:41:43Z","title_canon_sha256":"9c79d9537b639ae87dfcb52c33fa44e23d0c54ae7499c663edb7748c9e6ff235"},"schema_version":"1.0","source":{"id":"2203.07806","kind":"arxiv","version":2}},"canonical_sha256":"17ec3cb5caa7481043b1d94260accf75b5ee590aa0ee682d5036b718a3ad1a47","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"17ec3cb5caa7481043b1d94260accf75b5ee590aa0ee682d5036b718a3ad1a47","first_computed_at":"2026-07-05T05:25:28.254546Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:25:28.254546Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"R9BEJMmSEFshdnfHQXV4KC1Nc4AiFXfH6iQVZAajzbz0lFIvdHn9PLjGnW1DV02FTKKknoldFGSKY14NYxZRDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T05:25:28.255020Z","signed_message":"canonical_sha256_bytes"},"source_id":"2203.07806","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0e150667e65db7ebc7e3bded5b66468e17588e8875cfead663b1c8571325a213","sha256:9716f00a9df7f2dc645a419ed17cbc4611d7605a52cc8a3d4ef3f983863d6d69"],"state_sha256":"3f409a43ff1f4a44a13b0ee4b08afa7c69a7195ce99ca3f22edee9b70ec6f74c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zBqD89nURhY4GzF2UPCTnQZMbuEaC5ye7tR8Ei/v9uDsUNFNRJlEEfhzarW16ZjUsHEBIUbrFCHpBRh4b9H9CA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-19T14:16:35.523505Z","bundle_sha256":"03359ce160b68a3a1c6ebe951de47bfe02e42aca37475d1f64784c03153e2a11"}}