Received-SPF: pass (sog-mx-4.v43.ch3.sourceforge.com: domain of gmail.com
	designates 209.85.214.182 as permitted sender)
	client-ip=209.85.214.182; envelope-from=mh.in.england@gmail.com;
	helo=mail-ob0-f182.google.com; 
MIME-Version: 1.0
Sender: mh.in.england@gmail.com
In-Reply-To: <CAAS2fgTA9dmMeSmkMCa0AKpn8VMU8HDOCJQB3zfyb-E4Tmo8rQ@mail.gmail.com>
References: <CANEZrP1t3Pz3FOgxkxsj+sSgyQhPxfUTdCGXTC7=yxeZkGt-DQ@mail.gmail.com>
	<CAJHLa0NhZ=RuUMts19EUhY6C1+dy1yaje3Hb5Lfm+AqjRRL5uw@mail.gmail.com>
	<CANEZrP20E5R3D+Em4hordpSpe-e88iyHwyq=WdffsTCpTm+RVA@mail.gmail.com>
	<CAJHLa0NcFcRhczf9WWGj+4fYBdYCUBb7Zm__Y5+qhprXL21wUA@mail.gmail.com>
	<CAAS2fgTA9dmMeSmkMCa0AKpn8VMU8HDOCJQB3zfyb-E4Tmo8rQ@mail.gmail.com>
Date: Wed, 16 Jul 2014 17:01:20 +0200
Message-ID: <CANEZrP1TRVt1Vs035du50uLwq9V-T37aB916OtTq6bPbdBe+pw@mail.gmail.com>
From: Mike Hearn <mike@plan99.net>
To: Gregory Maxwell <gmaxwell@gmail.com>
Content-Type: multipart/alternative; boundary=089e0102fb060c7e0504fe50cc14
Cc: Bitcoin Dev <bitcoin-development@lists.sourceforge.net>
Subject: Re: [Bitcoin-development] Draft BIP for geutxos message
Precedence: list

--089e0102fb060c7e0504fe50cc14
Content-Type: text/plain; charset=UTF-8

>
> In particular, can this document
> specifically call out that a local network attacker can MITM all the
> peers.


It already does, last sentence of the authentication section is:

Querying multiple nodes and combining their answers can be a partial
solution to this, although as nothing authenticates the Bitcoin P2P network
a man in the middle could still yield incorrect results


> (If Mike would prefer, I can send a diff with proposed changes)
>

Yes please.

--089e0102fb060c7e0504fe50cc14
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_extra"><div class=3D"gmail_quote"><blo=
ckquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left=
-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;paddi=
ng-left:1ex">
In particular, can this document<br>
specifically call out that a local network attacker can MITM all the<br>
peers.</blockquote><div><br></div><div>It already does, last sentence of th=
e authentication section is:</div><div><br></div><div><span style=3D"color:=
rgb(51,51,51);font-family:Helvetica,arial,freesans,clean,sans-serif,&#39;Se=
goe UI Emoji&#39;,&#39;Segoe UI Symbol&#39;;font-size:16px;line-height:27.2=
00000762939453px">Querying multiple nodes and combining their answers can b=
e a partial solution to this, although as nothing authenticates the Bitcoin=
 P2P network a man in the middle could still yield incorrect results</span>=
</div>
<div>=C2=A0</div><div>=C2=A0</div><blockquote class=3D"gmail_quote" style=
=3D"margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(20=
4,204,204);border-left-style:solid;padding-left:1ex">(If Mike would prefer,=
 I can send a diff with proposed changes)<br>
</blockquote><div><br></div><div>Yes please.=C2=A0</div></div><br></div></d=
iv>

--089e0102fb060c7e0504fe50cc14--