Back to matrix

C07-CG: Yes

Rationale

The selected TLS 1.3 layer permits encrypted record padding and empty application-data records for cover traffic. This meets the criterion for an optional mechanism; it does not establish an enabled policy or effective end-to-end correlation resistance. The initial TCPCL header remains visible.

Assessment method

Documentary review; no new runtime experiment

Source context

Primary specification and bounded profile inference

Outstanding qualification

Pin TLS padding controls, exercise them on every observed hop and measure residual correlation and cost. No enabled defaults or measured effectiveness are claimed.

Public sources