Skip to content

Have the server sign PROTOCOL_SUPPORT/PROTOCOL_VERSION#731

Closed
TheBlueMatt wants to merge 2 commits intobitcoin:masterfrom
TheBlueMatt:fix-6
Closed

Have the server sign PROTOCOL_SUPPORT/PROTOCOL_VERSION#731
TheBlueMatt wants to merge 2 commits intobitcoin:masterfrom
TheBlueMatt:fix-6

Conversation

@TheBlueMatt
Copy link
Copy Markdown
Contributor

No description provided.

This closes #6, ensuring no future MiTM-based downgrade attacks can
occur. Note that obviously this doesn't do anything for TOFU
clients as any MiTM attacker can also replace the pubkey, but it
does protect either connection-reset-based MiTM attackers as the
pubkey must not change and also any clients which specify the
expected public key.
@TheBlueMatt
Copy link
Copy Markdown
Contributor Author

@jonasnick

@TheBlueMatt
Copy link
Copy Markdown
Contributor Author

Oops wrong head, sorry.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant