Skip to content

Add security/robustness to the KRPC_Sender protocol by comparing addresses to transaction_id's #8

@gsko

Description

@gsko

Make sure that a malicious DHT node can't simply guess/choose a transaction_id. Do this by comparing inbound responses to outbound queries.

ie:
we send a query with transaction_id: 5
we get a response with transaction_id: 5,

did it come from who we sent it to? or a random internet citizen?

Metadata

Metadata

Assignees

No one assigned

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions