1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
|
{% extends "common/base.j2" %}
{% block body_content %}
<!-- Jumbotron -->
<div class="jumbotron">
<div class="container text-center">
<div class="logo">
<img src="images/gnunet-small-logo.png" />
</div>
<p>
{% trans %}
GNUnet is a new network stack for building secure, decentralized and
privacy-preserving applications. Our goal is to replace the
old insecure Internet protocol stack. <!--It emerges from academic research on improving privacy on the internet.--> It has strong roots in academic research.
<br><br>
GNUnet uses the physical Internet infrastructure as a basis for a 100% peer-to-peer framework for applications to run on [link to GNUnet layer grafic].
<br><br>
GNUnet is made for an open society: GNUnet is a self-organizing network, it's free software, as in freedom [link free software]. GNUnet puts you in control of your data. You determine which data to share with whom.
<br><br>
If you want to participate join <a href="ev.html">us</a>.
{% endtrans %}
</p>
<a class="btn btn-dark" href="https://gitlab.secushare.org/GNUnet/tutorials/blob/master/README.md">
{% trans %}
Try it
{% endtrans %}
</a>
</div>
</div>
<div class="container-fluid text-center c_acronym">
<div class="container">
<div class="row">
<h3>
{% trans %}
The conventional Internet is currently like a system of roads with deep potholes and highwaymen all over the place. Even if you still can use the roads (e.g. send emails, or browse websites) your vehicle might get hijacked, damaged, or long ugly arms might reach into its back and steal your items (data) to use it against you and sell it to others - while you can't even notice the thievery nor accuse and hold the scroungers accountable.
<br><br>
The Internet of tomorrow needs GNUnet today.
{% endtrans %}
</div>
</div>
</div>
<div class="container">
<div class="row">
<div class="col-lg-6">
<h3>{{ _("The Internet is broken") }}</h3>
<p>
{% trans %}
Protocols from Ethernet and IP to BGP and X.509 PKI fail by being unsecure-by-default: protecting against address forgery, routers learning metadata, or choosing really trusted CAs is nontrivial and sometimes nigh impossible.
<!--
Please name abbreviations + short explanations for abbreviations.
-->
<br><br>
GNUnet is an Internet <a href="https://www.w3.org/2014/strint/papers/65.pdf">secure-by-design</a>, improving addressing, routing, naming and content distribution in a technically robust manner - as opposed to ad-hoc designs in place today.
{% endtrans %}
</p>
</div>
<div class="col-lg-6">
<h3>{{ _("Developing decentralized applications is hard") }}</h3>
<p>
{% trans %}
It seems like every other distributed or P2P project develops its own library stack, covering transports, stream muxing, discovery and others. This divides effort and multiplies bug count.
<br><br>
GNUnet is a metadata-preserving foundation for your application, covering areas from addressing to reliable bidirectional Axolotl-encrypted channels, with advanced routing. Our work is based on continuous research spanning almost two decades.
{% endtrans %}
</p>
</div>
</div>
<div class="row">
<div class="col-lg-6">
<h3>{{ _("Metadata leaks en masse") }}</h3>
<p>
{% trans %}
Even though transport encryption is increasingly being deployed in the Internet, it can only do so much: sender and receiver, times, frequency and the volume of communication are all revealed, which enables reverse engineering pages visited and website fingerprinting, as demonstrated with Tor.
<br><br>
GNUnet addresses these concerns with Perfect Forward Secrecy via ephemeral public key addressing, fixed packet size to hinder traffic analysis, layered encryption, Sybil-resistant routing, and others.
{% endtrans %}
</p>
</div>
<div class="col-lg-6">
<h3>{{ _("Users’ freedoms are not respected") }}</h3>
<p>
{% trans %}
Today, monitoring infrastructure, proprietary implementations, traffic shapers and firewalls restrict all of the <a href="https://www.gnu.org/philosophy/free-sw.html">essential freedoms</a> to some degree.
<br><br>
GNUnet gives users freedoms to securely access information (“run” the network), to study all aspects of the network’s operation (“access the code”), to distribute information (“copy”), as well as the freedom to deploy new applications (“modify”).
{% endtrans %}
</p>
</div>
</div>
</div>
<div class="container-fluid text-center c_acronym">
<div class="container">
<div class="row">
<h3>
{% trans %}
GNUnet aims to enable a secure and ethical Internet.
{% endtrans %}
</h3>
</div>
</div>
</div>
<div class="container adorn_h3_bracket">
<div class="row">
<div class="container">
<h2>
Featured Applications
</h2>
</div>
</div>
<div class="row">
<div class="col-lg-4">
<h3>{{ _("GNU Taler") }}</h3>
<p>
{% trans %}
<a href="https://taler.net/">GNU Taler</a>
is a new privacy-preserving electronic payment system.
Payments are cryptographically
secured and are confirmed within milliseconds with
extremely low transaction costs.
{% endtrans %}
</p>
</div>
<div class="col-lg-4">
<h3>{{ _("The GNU Name System") }}</h3>
<p>
{% trans %}
The GNU Name System (GNS) is a fully decentralized replacement
for the Domain Name System (DNS). Instead of using a
hierarchy, GNS uses a directed graph. Naming conventions
are similar to DNS, but queries and replies are private even
with respect to peers providing the answers. The integrity of
records is cryptographically secured. GNS integrates
a robust, efficient and instant key revocation mechanism.
{% endtrans %}
</p>
</div>
<div class="col-lg-4">
<h3>{{ _("secushare") }}</h3>
<p>
{% trans %}
<a href="https://secushare.org/">secushare</a>
is creating a decentralized social networking
application on top of GNUnet. Using overlay
multicast and the extensible PSYC protocol, notifications are
distributed end-to-end encrypted to authorized users only.
{% endtrans %}
</p>
</div>
</div>
<div class="row">
<div class="col-lg-4">
<h3>{{ _("pretty Easy privacy") }}</h3>
<p>
{% trans %}
<a href="https://pep.foundation/">pretty Easy privacy (p≡p)</a> is creating a usable
usable end-to-end encrypted e-mail solution using
opportunistic key exchange.
p≡p will use GNUnet to protect meta data and exploit new
cryptographic protocols to create a privacy-preserving version
of the Web-of-Trust.
{% endtrans %}
</p>
</div>
<div class="col-lg-4">
<h3>{{ _("Filesharing") }}</h3>
<p>
{% trans %}
Lorem ipsum dolor sit amet, consectetur adipisici elit, sed eiusmod tempor incidunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquid ex ea commodi consequat. Quis aute iure reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint obcaecat cupiditat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.
{% endtrans %}
</p>
</div>
<div class="col-lg-4">
<h3>{{ _("Conversation") }}</h3>
<p>
{% trans %}
Lorem ipsum dolor sit amet, consectetur adipisici elit, sed eiusmod tempor incidunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquid ex ea commodi consequat. Quis aute iure reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint obcaecat cupiditat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.
{% endtrans %}
</p>
</div>
<!--
<div class="col-lg-4">
<h3>{{ _("Foundations") }}</h3>
<p>
{% trans %}
The foundation of GNUnet are a distributed hash
table (R5N), an SCTP-like end-to-end encrypted
messaging layer (CADET) and a pluggable transport
system (TRANSPORT). Using public keys for addresses
and self-organized decentralized routing algorithms,
these subsystems replace the traditional TCP/IP stack.
{% endtrans %}
</p>
</div>
<div class="col-lg-4">
<h3>{{ _("Security") }}</h3>
<p>
{% trans %}
GNUnet is implemented using a multi-process architecture.
Each subsystem runs as a separate process, providing
fault-isolation and enabling tight permissions to be
granted to each subsystem. Naturally, the
implementation is a <a href="https://www.gnu.org/">GNU</a>
package, and will always remain free software.
{% endtrans %}
</p>
</div>
//-->
</div>
</div>
<div class="container text-center">
<a class="btn btn-dark" href="https://grothoff.org/christian/habil.pdf">
{% trans %}
Read the habiliation thesis 'The GNUnet System'
{% endtrans %}
</a>
<br>
{% trans %}
(More publications around and about GNUnet can be found on our
<a href="https://docs.gnunet.org/bib">bibliography</a> website)
{% endtrans %}
</div>
<div class="container">
<div class="row">
<div class="col-lg-12">
<h2>{{ _("GNUnet News") }}</h2>
{% include "news.html.j2.inc" %}
</div>
</div>
</div> <!-- /container -->
{% endblock body_content %}
|
