Re: [private-measurement] Questions about Collusion - What can be done about the collusion risk in these systems? (#12)

@martinthomson Appreciate the thoughtful and broad consideration of the question of collusion. Regarding this comment:

> I hope that it isn't necessary to articulate precisely why an adversary might find this information worth seeking.

We can short circuit that potential discussion by simply noting that we can't anticipate how any given datum may come to be used and therefore should constrain the collection, communication and storage of data to the bare minimum required for intended use-cases.

With respect to the general topic of collusion, I think it is worth including the notion of forced collusion wherein an authority compels holders of data to provide it -- for example a government issuing subpoenas to MPC participants or TEE operators.

More generally, it seems the first line of defense against collusion is to limit the potential gain sufficiently that the effort isn't worthwhile.

-- 
GitHub Notification of comment by bmayd
Please view or discuss this issue at https://github.com/patcg/private-measurement/issues/12#issuecomment-1147638831 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Monday, 6 June 2022 16:24:50 UTC