Back to matrix

C07-YG: Yes

Rationale

The column now explicitly selects TLS 1.3. RFC 8446 section 5.4 and appendix E.3 provide encrypted record padding and padding-only traffic, qualifying under C07 optional-mechanism rules. This is TLS-layer capability, not an application feature or evidence that a deployed client exposes a padding policy. Timing and residual length correlation remain possible.

Assessment method

Documentary analysis

Source context

Primary specification / selected profile

Outstanding qualification

Pin the TLS implementation and API/configuration enabling a padding policy; verify records on every observed segment and evaluate correlation reduction, latency and bandwidth cost. TLS 1.3 capability is not evidence of enabled defaults or effective end-to-end cover. No test executed.

Public sources