Support Hidden Service Connection (kill metadata)
Nobody has claimed this yet.
- Dominant language
- Haskell
- Stars
- 2.8k
- Forks
- 334
- Avg merge
- 1d 7h
- Merged PRs (30d)
- 50
Description
Since we know that the clearnet connection based on 2 insecurities DNS&TLS, Its better to use Hidden Services like onion service or I2P service and hopefully can be supported as an option provided to the apps (specially desktop version)
- How come DNS insecure (Wikipedia provide tons of insecurities, As DNS never created to solve security issues):
https://en.wikipedia.org/wiki/Domain_Name_System#Security_issues
https://en.wikipedia.org/wiki/Domain_Name_System#Privacy_and_tracking_issues
- How come HTTPS/TLS insecure: (Thx to Moxie Marlinspike for sslstrip)
https://invidious.snopyta.org/watch?v=5dhSN9aEljg
- Last Thing that the design of a messenger over clearnet means/posses metadata trackabilities issues.
Solutions&Ideas:
-
Using Hidden services like Tor hidden services or I2P eepsite solve DNS/TLS issues (comparison between the two).
-
e.g Messengers which uses Tor/I2P:
*https://briarproject.org/ (Tor)
*https://wahay.org/ (Tor + mumble)
*https://cwtch.im/ (Tor)
*https://github.com/i2pchat/i2pchat (I2P)
- Messengers on the way to allow their servers to support hidden services:
*Matrix #7088
Useful links:
Tor Anti-DOS mechanism: https://onionbalance.readthedocs.io/en/latest/v3/tutorial-v3.html
Onion Header: https://community.torproject.org/onion-services/advanced/onion-location/
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
The issue names no files, tests, or entry points. Start by mapping how wire-server exposes and configures client connections, then determine the scope for offering Tor or I2P hidden-service connections; done would require an agreed design and implementation path rather than only a proposal.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- haskell
- Domain
- backend, networking, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 18/100