X-Git-Url: https://git.immae.eu/?a=blobdiff_plain;f=client%2Fsrc%2Fapp%2F%2Babout%2Fabout-peertube%2Fabout-peertube.component.html;h=d1c3c678a385c8d7d128cd3906bd3c060fe8e953;hb=59b741d6e3bd883b0a32d7aa02f953cc1bee16d6;hp=1dbad3096aa9a93274a5bb9669bbc7e813bd2d74;hpb=81fe3c67c5d70e69aa2d965a41afd7331cd4fb76;p=github%2FChocobozzz%2FPeerTube.git diff --git a/client/src/app/+about/about-peertube/about-peertube.component.html b/client/src/app/+about/about-peertube/about-peertube.component.html index 1dbad3096..d1c3c678a 100644 --- a/client/src/app/+about/about-peertube/about-peertube.component.html +++ b/client/src/app/+about/about-peertube/about-peertube.component.html @@ -1,33 +1,32 @@
-

- What is PeerTube? +

+ This website is powered by PeerTube

- mascot + mascot -
+

PeerTube is a self-hosted ActivityPub-federated video streaming platform using P2P directly in your web browser.

- It is a free and open-source software, under the AGPLv3 + It is free and open-source software, under AGPLv3 licence.

- For more information, please visit joinpeertube.org. + For more information, please visit joinpeertube.org.

-
+
-
- Use PeerTube - documentation -
+
+ Use PeerTube documentation +
Discover how to setup your account, what is a channel, how to create a playlist and more! @@ -37,10 +36,9 @@
-
- PeerTube - Applications -
+
+ PeerTube Applications +
Discover unofficial Android applications or browser addons! @@ -50,10 +48,9 @@
-
- Contribute on - PeerTube -
+
+ Contribute on PeerTube +
Want to help to improve PeerTube? You can translate the web interface, give your feedback or directly contribute to the code! @@ -62,108 +59,101 @@
-
- - -
-

-
- P2P & Privacy -

- -

- PeerTube uses the BitTorrent protocol to share bandwidth between users by default to help lower the load on the server, - but ultimately leaves you the choice to switch back to regular streaming exclusively from the server of the video. What - follows applies only if you want to keep using the P2P mode of PeerTube. -

- -

- The main threat to your privacy induced by BitTorrent lies in your IP address being stored in the instance's BitTorrent - tracker as long as you download or watch the video. -

- -
What are the consequences?
- -

- In theory, someone with enough technical skills could create a script that tracks which IP is downloading which video. - In practice, this is much more difficult because: -

- -
    -
  • - An HTTP request has to be sent on each tracker for each video to spy. - If we want to spy all PeerTube's videos, we have to send as many requests as there are videos (so potentially a lot) -
    • - -
  • - For each request sent, the tracker returns random peers at a limited number. - For instance, if there are 1000 peers in the swarm and the tracker sends only 20 peers for each request, there must be at least 50 - requests sent to know every peer in the swarm -
    • - -
  • - Those requests have to be sent regularly to know who starts/stops watching a video. It is easy to detect that kind of behaviour -
    • - -
  • - If an IP address is stored in the tracker, it doesn't mean that the person behind the IP (if this person exists) has watched the - video -
    • - -
  • - The IP address is a vague information: usually, it regularly changes and can represent many persons or entities -
    • - -
  • - Web peers are not publicly accessible: because we use WebRTC inside the web browser (with the - WebTorrent library), the protocol is different from classic BitTorrent. - When you are in a web browser, you send a signal containing your IP address to the tracker that will randomly choose other peers - to forward the information to. - See this document for more information -
    • -
- -

- The worst-case scenario of an average person spying on their friends is quite unlikely. - There are much more effective ways to get that kind of information. -

- -
How does PeerTube compare with YouTube?
- -

- The threats to privacy with YouTube are different from PeerTube's. - In YouTube's case, the platform gathers a huge amount of your personal information (not only your IP) to analyze them and track you. - Moreover, YouTube is owned by Google/Alphabet, a company that tracks you across many websites (via AdSense or Google Analytics). -

- -
What can I do to limit the exposure of my IP address?
- -

- Your IP address is public so every time you consult a website, there is a number of actors (in addition to the final website) seeing - your IP in their connection logs: ISP/routers/trackers/CDN and more. - PeerTube is transparent about it: we warn you that if you want to keep your IP private, you must use a VPN or Tor Browser. - Thinking that removing P2P from PeerTube will give you back anonymity doesn't make sense. -

- -
What will be done to mitigate this problem?
- -

- PeerTube wants to deliver the best countermeasures possible, to give you more choice - and render attacks less likely. Here is what we put in place so far: -

- -
    -
  • We set a limit to the number of peers sent by the tracker
    • -
  • We set a limit on the request frequency received by the tracker
    • -
  • Allow instance admins to disable P2P from the administration interface
    • -
  • Automatic video redundancy from some instances: one doesn't know if the IP downloaded the video on purpose or if it a server
    • -
- -

- Ultimately, remember you can always disable P2P by toggling it in the video player, or just by disabling - WebRTC in your browser. -

-
+
+

+
+ P2P & Privacy +

+

+ PeerTube uses the BitTorrent protocol to share bandwidth between users by default to help lower the load on the server, + but ultimately leaves you the choice to switch back to regular streaming exclusively from the server of the video. What + follows applies only if you want to keep using the P2P mode of PeerTube. +

+ +

+ The main threat to your privacy induced by BitTorrent lies in your IP address being stored in the instance's BitTorrent + tracker as long as you download or watch the video. +

+ +

What are the consequences?

+ +

+ In theory, someone with enough technical skills could create a script that tracks which IP is downloading which video. + In practice, this is much more difficult because: +

+ +
    +
  • + An HTTP request has to be sent on each tracker for each video to spy. + If we want to spy all PeerTube's videos, we have to send as many requests as there are videos (so potentially a lot) +
    • + +
  • + For each request sent, the tracker returns random peers at a limited number. + For instance, if there are 1000 peers in the swarm and the tracker sends only 20 peers for each request, there must be at least 50 + requests sent to know every peer in the swarm +
    • + +
  • + Those requests have to be sent regularly to know who starts/stops watching a video. It is easy to detect that kind of behaviour +
    • + +
  • + If an IP address is stored in the tracker, it doesn't mean that the person behind the IP (if this person exists) has watched the + video +
    • + +
  • + The IP address is a vague information: usually, it regularly changes and can represent many persons or entities +
    • + +
  • + Web peers are not publicly accessible: because we use the websocket transport, the protocol is different from classic BitTorrent tracker. + When you are in a web browser, you send a signal containing your IP address to the tracker that will randomly choose other peers + to forward the information to. + See this document for more information +
    • +
+ +

+ The worst-case scenario of an average person spying on their friends is quite unlikely. + There are much more effective ways to get that kind of information. +

+ +

How does PeerTube compare with YouTube?

+ +

+ The threats to privacy with YouTube are different from PeerTube's. + In YouTube's case, the platform gathers a huge amount of your personal information (not only your IP) to analyze them and track you. + Moreover, YouTube is owned by Google/Alphabet, a company that tracks you across many websites (via AdSense or Google Analytics). +

+ +

What can I do to limit the exposure of my IP address?

+ +

+ Your IP address is public so every time you consult a website, there is a number of actors (in addition to the final website) seeing + your IP in their connection logs: ISP/routers/trackers/CDN and more. + PeerTube is transparent about it: we warn you that if you want to keep your IP private, you must use a VPN or Tor Browser. + Thinking that removing P2P from PeerTube will give you back anonymity doesn't make sense. +

+ +

What will be done to mitigate this problem?

+ +

+ PeerTube wants to deliver the best countermeasures possible, to give you more choice + and render attacks less likely. Here is what we put in place so far: +

+ +
    +
  • We set a limit to the number of peers sent by the tracker
    • +
  • We set a limit on the request frequency received by the tracker
    • +
  • Allow instance admins to disable P2P from the administration interface
    • +
+ +

+ Ultimately, remember you can always disable P2P by toggling it in the video player, or just by disabling + WebRTC in your browser. +