hostname resolution at peer connection about lnp-node HOT 6 OPEN

It's a well known attacks: if you don't use SSL nothing guarantees that you connect to the correctly resolved server; any cafe WiFi can direct you on some other host. If you use SSL, you are depending on government authorities authenticating your server and your identity, and the certificate can be revoked/not postponed.

from lnp-node.

Well, the DNS is deliberately removed from LNP/BP Core library and nodes, to prevent occasional exposure of the node to DNS servers and deanonymization - as well as many other types of attacks. That's why only IP addresses and Onion.

The rule we follow: no outcoming traffic from the node other than peer traffic and RPC interface explicitly defined by the user.

One can write a simple script to resolve DNS into IP and paste it as a parameter to the node launching command.

PS. DNS, SSL, PKI delenda est

from lnp-node.

Thanks for the clear answer.

I would really appreciate if you could point out some documentation for the attacks you mention, whenever you have time for it.

from lnp-node.

https://en.wikipedia.org/wiki/DNS_spoofing

https://www.cse.wustl.edu/~jain/cse571-07/ftp/cafecrack/index.html

from lnp-node.

Should we document this design choice a bit better? I can take this task.

from lnp-node.

You are welcome

from lnp-node.