Matthew Toseland wrote:
> If we are to include UIDs for our 
> peers then we must know them.

Are peers we've never connected to included in the list of peers used
for swapping?

Actually, come to think of it, why do swap requests need to include a
long-term node identifier at all? Why not just the node's location and
its peers' locations? (Sorry if I'm missing something obvious.)

> What can you do with that? Probably some fun things - but details 
> would be nice.

To be honest I can't think of any specific attacks, but a map of the
network still seems like a useful thing for an attacker to have.
Removing the routing location from the noderef and making swap
identifiers random would make it harder to map the network - it is worth
making those changes just in case, or is that just my usual paranoia
talking? ;-)

Cheers,
Michael

Reply via email to