To: Bitcoin development mailing list <bitcoin-dev@lists.linuxfoundation.org>
From: Jonas Schnelli <dev@jonasschnelli.ch>
Message-ID: <56F2B51C.8000105@jonasschnelli.ch>
Date: Wed, 23 Mar 2016 16:24:12 +0100
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:38.0)
	Gecko/20100101 Thunderbird/38.5.1
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;
	protocol="application/pgp-signature";
	boundary="jphCgCGa8Q1JoErib9kqWWuVDeS70rkRS"
Subject: [bitcoin-dev] p2p authentication and encryption BIPs
Precedence: list

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--jphCgCGa8Q1JoErib9kqWWuVDeS70rkRS
Content-Type: multipart/mixed; boundary="ErghshXugs9tWx89WGPcS8vghp0PQimWx"
From: Jonas Schnelli <dev@jonasschnelli.ch>
To: Bitcoin development mailing list <bitcoin-dev@lists.linuxfoundation.org>
Message-ID: <56F2B51C.8000105@jonasschnelli.ch>
Subject: p2p authentication and encryption BIPs

--ErghshXugs9tWx89WGPcS8vghp0PQimWx
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Hi

I have just PRed a draft version of two BIPs I recently wrote.
https://github.com/bitcoin/bips/pull/362

Two BIPs that addresses the problem of decoupling wallets/clients from
nodes while assuming a user (or a group) know the remote peer.

Authentication would be necessary to selective allow bloom filtering of
transactions, encryption or any other node service that might lead to
fingerprinting or resource attacks. Authentication would also be a
pre-requirement for certificate free encryption-handshakes that is
(enough?) resistant to MITM attacks.

Encryption is highly recommended if you connect a SPV node to a trusted
node.

Authentication would allow accessing private p2p extensions from a
remote SPV peer (example: fee estimation).

I'm aware of other methods to increase privacy and integrity (tor, VPN,
stunnel, etc.), however I think authentication and a basic communication
encryption should be part of the protocol and its setup should be
complete hassle-free.

Thanks for your feeback.

/jonas


--ErghshXugs9tWx89WGPcS8vghp0PQimWx--

--jphCgCGa8Q1JoErib9kqWWuVDeS70rkRS
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=IrPs
-----END PGP SIGNATURE-----

--jphCgCGa8Q1JoErib9kqWWuVDeS70rkRS--