<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">On 09/01/2017 10:39 AM, Nicholas Carter
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CALVPHayQZkTwk=OSU9cDXTfWrtigrNtncKmsDFC0RA-anYcsXA@mail.gmail.com">
<div dir="ltr">I'm interested to try this over the next few days.
Have any potential vulns been thought of yet?<br>
</div>
</blockquote>
The only potential vuln is that according to some crypto experts I
asked (including Jeremy Rand with the Namecoin project) the 128-bit
hash used for Cjdns IP can be brute forced by an adversary with the
resources of the NSA. You would have to cache (and verify) the
public key of your correspondents a la SSH to mitigate this. But if
you are using a recent Intel processor, you are already vulnerable
to the NSA.<br>
<blockquote type="cite"
cite="mid:CALVPHayQZkTwk=OSU9cDXTfWrtigrNtncKmsDFC0RA-anYcsXA@mail.gmail.com">
<div class="gmail_extra"><br>
<div class="gmail_quote">On Thu, Aug 31, 2017 at 8:12 PM, Stuart
Gathman <span dir="ltr"><<a
href="mailto:stuart@gathman.org" target="_blank"
moz-do-not-send="true">stuart@gathman.org</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">The folks
on SSB are excited to discover that with the permanent<br>
authenticated cjdns IPs, you can fairly easily dispense with
DNS for<br>
sending and receiving email. In addition to enabling raw
ips on my<br>
<a href="http://gathman.org" rel="noreferrer"
target="_blank" moz-do-not-send="true">gathman.org</a>
server, I installed opensmtpd on a node behind NAT, and can<br>
send and receive emails with no registration anywhere.<br>
<br>
I would post a link, but the gateway for the "corporate web"
is down.<br>
If you are on SSB, check out the #email channel.<br>
<br>
To give you the idea, you can email me at<br>
stuart@[IPv6:fcd9:7f8a:e050:<wbr>4b48:7fd6:7fa:5509:6e26]<br>
<br>
I just added [IPv6:fcd9:7f8a:e050:4b48:<wbr>7fd6:7fa:5509:6e26]
to<br>
/etc/mail/local-host-names to make sendmail accept mail for
that domain.<br>
</blockquote>
</div>
</div>
</blockquote>
</body>
</html>