Comments (2)
Iβm sure that one of the authors can have a more definitive answer for you but, from what I understand, hyperswarm/the DHT doesnβt necessarily prevent this but the way that DAT does discovery (by using a cryptographically-secure hash of the public key to derive the discovery key) meliorates those concerns (definitely Concern B) by making it practically impossible to go from having the discovery key to obtaining the public key and thus getting read access to the DAT being advertised. So a routing attack should fail the moment the public key fails to verify and this should also mean that you cannot serve poisonous content to lookup initiators that are using the DHT with DAT.
If revealing the parties interested in the same topic is part of Concern A then, afaik, hyperswarm does not β and probably cannot β address that issue (anonymity).
Again, Iβm not one of the authors so this is just a best-effort articulation of my understanding as someone using the modules and Iβd appreciate corrections if Iβm imprecise or incorrect in any way.
from hyperdht.
@aral that's accurate. @gpestana We're interested in solutions to preserve anonymity in the DHT. Our current implementation priority is reliability, but we're interested in privacy solutions if the tradeoffs can meet our requirements.
from hyperdht.
Related Issues (20)
- Use in browser HOT 3
- Unable to holepunch from the local network to a Docker container HOT 6
- Add userData to dht.announce()
- Strange error. HOT 2
- Privacy Preserving in @hyperswarm/dht HOT 2
- Sending HTTP traffic over Hyperswarm. Should we consider supporting multiplexing in the protocol? HOT 25
- Cache handshake information for quick-connect of additional sockets HOT 5
- Add userData to handshake HOT 2
- Same code works except in DigitalOcean servers HOT 20
- server (socket-pairer) throws if client write() without noise HOT 13
- multiple mutablePut failure (maybe my misunderstanding?) HOT 2
- remove node net module HOT 2
- README.md encryptedConnection.on('open'), is this a mistake? HOT 3
- Node can be connected to by its defaultKeyPair.publicKey, even if `node.listening` is empty. HOT 2
- stream from node.lookup() doesn't match the documented interface HOT 8
- Cannot read property length of null when using flushed() in Hyperswarm HOT 1
- Connection metadata HOT 1
- Output Public key to file and read into another file HOT 4
- destroy() hangs HOT 2
- [Feature] discovery on lan wihtout access to internet HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
π Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. πππ
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google β€οΈ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from hyperdht.