回复:用主机名代替 IP 地址
原始发布页
打开来源页面查看 1 个交叉存档
目前通过 IP 发送并没有多大用处:它会连接到该 IP,因此你会想用 TOR 来保持匿名,但这样通信完全可能遭到窃听和中间人攻击。
将来通过 IP 发送的计划,是把它做成比特币地址加 IP 的形式,例如:
1auaDZCFYqaGx4FKS5WenNfurk2SkoDu4h<某个分隔字符>1.2.3.4 或者 1auaDZCFYqaGx4FKS5WenNfurk2SkoDu4h<某个分隔字符>domain.com
我需要大家对分隔字符提出建议。":" 是一个候选,但 IPv6 本身含有 :,可能会让人混淆。最好是某种允许在 URL 参数中使用的字符。
我想为连接使用 SSL,并用比特币地址的公钥作为证书。这样你可以确信自己连接的正是预期的人,而且通信受到安全加密。这个比特币地址不会用于交易,只用于身份验证。一个新生成的比特币地址会通过 SSL 连接发送。
由于经过了身份验证,允许 IP 地址使用域名也就安全了。需要注意的是,如果使用代理,就要用 socks4a,而不是进行 DNS 查询。
英文原文
展开英文原文
The current sending by IP is not very useful: it connects to the IP, so you'd like to use TOR for anonymity, but then it can totally be eavesdropped and man-in-the-middled.
The future plan for sending to an IP is to make it a bitcoin address plus IP, like:
1auaDZCFYqaGx4FKS5WenNfurk2SkoDu4h<someseparatorcharacter>1.2.3.4 or 1auaDZCFYqaGx4FKS5WenNfurk2SkoDu4h<someseparatorcharacter>domain.com
I need suggestions for the separator character. ":" is a candidate, but IPv6 has : in it and that might get confusing. Something that's allowed in url parameters would be nice.
I want to use SSL for the connection, using the bitcoin address' public key as the cert. You would be certain you're connected to who you thought, and safely encrypted. The bitcoin address would not be used for the transaction, only for authentication. A new generated bitcoin address would be sent through the SSL connection.
Since it's authenticated, it would then be safe to allow the IP address to be a domain name. Some care taken that if a proxy is used, it uses socks4a instead of DNS lookup.