Re: BINKP over TLS
  By: Oli to mark lewis on Wed Apr 29 2020 16:19:14


 Oli>>> Using Tor and Tor a hidden services is much easier to setup
 Oli>>> though.

 ml>> it also isn't allowed everywhere either... try connecting to my
 ml>> site/system via Tor using any protocol you desire ;)

 Oli> If you don't offer a Tor hidden service, I cannot connect to your node's
(non  existent) .onion address.

i never said or indicated that i did run such a service... perhaps your
statment was too loose or general? or perhaps i misread it? :shrug:


 Oli> Blocking incoming connections from Tor exit nodes doesn't prevent a
hidden  service from working.

no one said it did ;)

blocking incoming from such also blocks outgoing to such, though... my
perimeter firewall does an exceptional job of performing that task :)


 Oli> I don't recommend unencrypted binkp connections over Tor exit nodes.

why not? binkp connections carry state secrets? somehow i don't think so...


)\/(ark
--- SBBSecho 3.11-Linux