Re:Decentralized Naming and Certificate Authority
by lifty on Wednesday February 12, 2020 @12:59PM
(#22311012)
I hope more implementations will become available. It’s a decent start, since the C based light client doesn’t expose any services.
[ Parent
| on HN ]
Re:Decentralized Naming and Certificate Authority
by RL_Quine on Wednesday February 12, 2020 @01:02PM
(#22311046)
You can't say that a C daemon interacting with a network has no attack surface, especially as the thing runs as root.
It promiscuously makes outgoing TCP connections to an unauthenticated P2P network, so given enough time you'll eventually interact with an attacker if there is one.